A business may want help summarising enquiries, drafting replies or organising research. That does not mean an entire customer file belongs in the prompt. Decide what the task needs and whether the chosen service is approved for that information. This is a practical data-handling framework, not a claim that changing one setting makes every upload confidential or appropriate.

Ask what the task actually needs to know

Write the desired output first. If you need a general reply template, an invented example may be enough. Remove names, telephone numbers, addresses, account identifiers and unrelated attachments before using real material. Replacing a name alone may not anonymise a detailed story. For a hypothetical shop, ask the AI to organise fictional delivery questions instead of uploading the actual customer chat export. Keep the private original in the business’s approved storage.

Read the controls for the account you are actually using

OpenAI’s current Help guidance distinguishes model-training controls from chat retention. Turning off model improvement does not itself delete saved chats. Temporary chats can be retained for up to 30 days for safety. Account and workspace settings can differ. Check the provider’s current documentation for your exact service rather than transferring a promise from another plan. These facts are a reason to review the workflow, not permission to upload material the client has not authorised.

Set simple rules for staff, clients and outside tools

Agree which data categories can be used, who approves an exception and which connected tools are allowed. Keep credentials, recovery codes and secret keys out of prompts. Consider what an external integration receives, not only what the main chat displays. Record the minimum necessary context for the task and avoid copying full private conversations into shared project notes. If the information is sensitive and the handling cannot be established, use a safer manual workflow or obtain qualified advice before proceeding.

Review the output and close the task cleanly

Check whether the AI output repeats private details that were unnecessary for the final document. Send the customer only the approved result, not an unrestricted shared conversation. Follow the business’s retention and deletion process for uploaded material, chat records and separately stored files. Keep a brief record of the tool, purpose and approval where the project requires it. The benefit of AI should come from a defined task with controlled information, not from collecting more customer data than the work needs.

READ THE ORIGINAL SOURCES

Sources & further reading

Put the next step into practice.

Tell me about your business and we can discuss a practical plan.

Let’s talk on WhatsApp