In this article · 6 sections
Staff are already using AI tools, often personal free accounts, to write replies, summarise documents and analyse spreadsheets. The biggest AI privacy risks come from what gets pasted in.
What never to paste into consumer AI tools
- Customer phone numbers, addresses and ID numbers (Aadhaar, PAN, passport)
- Bank details, card data, OTPs, passwords
- Health information
- Confidential contracts, tenders and pricing strategies
- Employee salary and HR records
- Source code with secrets or API keys
Key risks
- Training and retention: some consumer settings allow conversations to be used to improve models or retained for a period
- Account compromise: if a staff member's AI account is hacked, chat history is exposed. See passkeys
- Wrong recipient: shared links to chats may be public
- Plugins and connected apps accessing more data than needed
- Prompt injection: malicious content in emails or web pages tricking AI tools connected to your data. See AI agents explained
- Inaccurate outputs sent to customers as facts
Safer setup
- Use business/team plans with data controls (typically excluding your data from training by default; check each provider's terms)
- Turn off chat history/training on accounts where available, if using consumer plans
- Anonymise: replace names and numbers with placeholders ("Customer A", "98XXXXXX10")
- Keep sensitive analysis inside trusted business software
- Restrict which integrations staff can connect
Legal angle in India
Under the DPDP Act, businesses handling personal data must use it for stated purposes and protect it with reasonable safeguards. Sending customer data to third-party tools without care can create compliance risk. See DPDP Act website compliance.
Make it a policy
A one-page AI policy tells staff what's allowed. See AI policy for employees (template).
FAQs
Is it safe to upload my sales spreadsheet?
Remove personal data first, or use a business plan with appropriate protections.
Do AI companies read my chats?
Policies differ. Some review limited data for safety or quality. Read the privacy terms for the plan you use.
Was this article helpful?
Your answer helps us improve our guides
