One nice way of debugging this is to enable the ai debugging. When you enable it you will see an (I) button, can you confirm that when you click it and looks through the big blob sent to the LLM that the private content is not found?
Our engine does pass the user to the search backend (the user initiating the convo with bot)