To elaborate on what Theo said. You can upload the documents to your bot and no one will have access to those documents. If you decide to export your bot to someone the documents will be exported with. You can create another bot and then import the bot onto that bot, then delete all of the private information of the copied version of the bot. If you decide to publish your bot, the documents will be queryable and can therefor be shown to the user.