Working smart

What not to paste into AI: a plain privacy guide

A plain privacy guide for using AI at work: what never to paste in, how to swap real details for placeholders, and where to find the data settings.

Say you run a hair salon. A longtime client emails to complain that her appointment ran badly late, and you want help writing a reply that is warm without groveling. The fastest move is to paste her whole email into an AI tool and ask for a draft.

Pause for a second before you do.

AI tools are genuinely great at this kind of task, and you should use them for it. But the chat box feels private in a way it may not be, and a few small habits — the same kind of habits as locking the till at night — let you get the help without handing over things you should keep.

No scare stories here. Just simple rules you can start using today.

Four things that should never go into a chat box

Customer names together with contact details. A first name on its own is usually fine. A full name plus a phone number, email, or address is a contact record, and it is not yours to share. Split them: keep the situation, drop the details.

Card numbers, bank details, and ID numbers. Yours or anyone else’s. There is no writing task on earth that needs a real card number in the draft. If a document contains one, blank it out before pasting.

Health details. This covers more small businesses than you might think. Massage therapists, personal trainers, caterers handling allergies, cleaners who know about a client’s condition — if it is about someone’s body or health, it stays out.

Passwords and login codes. Never, in any form, for any reason. No AI tool needs them to help you write, and nothing legitimate will ask.

The placeholder habit

Here is the move that makes almost every privacy question easy: swap real details for placeholders before you paste. The AI writes just as good a reply for [CLIENT NAME] as it does for a real person, because the name was never the point — the situation was.

So instead of pasting the complaint email, you describe it:

A regular client, [CLIENT NAME], emailed to say her color appointment ran 40 minutes late and she missed a work meeting because of it. Draft a short, warm apology that takes responsibility without groveling, and offer her a complimentary treatment on her next visit.

When the draft comes back, put the real name in yourself. Ten extra seconds.

There is a bonus, too. Rewriting the situation in your own words forces you to re-read what you were about to share — which is exactly the moment you spot the detail that should stay private.

Anonymize before you paste

The placeholder habit grows into a broader one: a quick scan of anything before it goes in. Ask one question — could someone identify a real person from this?

Names are the obvious part. But an address, a job title at a small company, or “the only vegan bakery on Main Street” can identify someone just as fast. When in doubt, generalize. “A client of six years who comes in monthly” carries all the useful information that a name did, with none of the risk.

The same goes for your own business secrets. Supplier pricing, an employee dispute, the terms of your lease — describe the shape of the situation rather than pasting the documents, unless you have decided the tool is one you trust with them.

Free tools versus business accounts

One piece of background is worth knowing, in general terms. Many free consumer AI tools may use what you type to help improve their products. Paid business plans typically promise not to. Neither is a scandal — it is simply the trade — but you should know which side of the trade you are on.

Every major tool has data settings, usually under a name like “Data controls” or “Privacy” in the settings menu. Look for the option about using your conversations to train or improve the service, and set it the way you want. Menus get reorganized, so it is worth checking again every few months.

If AI has become part of how you run the business day to day, a paid business account is worth considering — as much for the stronger data commitments as for the extra features.

A rule of thumb that covers the rest

No list of rules covers every case, so here is the single question that does: would I be comfortable if this exact text were read aloud to the person it is about?

Or think of the chat box as a capable freelancer you met last week. You would happily hand them a task, a description of a situation, a draft to polish. You would not hand them your filing cabinet.

That is the whole posture. Generous with tasks, careful with details.

Try this today

Ten minutes, two steps.

First, open the AI tool you use most and find its data settings — start in the settings menu and look for anything labeled data or privacy. Read what is there and set it to your comfort level.

Second, write yourself a placeholder list and keep it near your desk or in a note: [NAME], [PHONE], [EMAIL], [ADDRESS], [CARD]. Next time you are about to paste something real, the swap will take seconds — and after a week or two you will find you do it without thinking.