Kind of the way it is with every service, unless you take extra measures to protect yourself. E.g., PGP, careful selection of data you upload, or just not using any cloud services in the first place.

No, normal online providers will have terms that they don't infringe into your privacy rights.

Oh, so you mean unlike Microsoft they pretend they don't infringe on your rights. :)

There are many online-services, where there is no such right given to the hosting company to read the data contained in the service. I would say, that such a statement is rather uncommon (may be changed by the eMail providers MS and Google).

And: In my opinion, they just pretend! In my country, such a behavior could well be contested in court in my opinion, because we normally have strong rights protecting communications.