What Not to Paste Into AI

Why this matters

Most consumer AI tools send your input to an external server. What you type into the chat window may be used to train future models, stored in logs, or accessible to employees at that company. The default privacy settings on many tools do not protect you the way you might assume. This is not a reason to avoid AI. It is a reason to be deliberate about what you put in.

Passwords, API keys, and credentials

Never paste a password, API key, secret token, or any credential into an AI tool. This includes environment variable files, .env files, or any configuration that contains access keys. If you need help debugging code that uses credentials, replace the real values with placeholders (e.g. YOUR_API_KEY_HERE) before pasting.

Customer or client personal data

Names, emails, phone numbers, addresses, or any personally identifiable information (PII) about your customers should not go into consumer AI tools. This applies even if you're just asking the AI to help format a spreadsheet or draft a follow-up email. Use fake placeholder data for examples, or use a privacy-compliant enterprise tool if your workflow requires it.

Unreleased business information

Business plans, unannounced products, financial projections, acquisition details, or anything under NDA should stay out of general AI tools. Even if you trust the platform, the operational risk of that information being exposed through a breach, a bug, or a policy change isn't worth it. Draft with placeholders; fill in real details only in a controlled environment.

Medical and legal specifics

Detailed personal health information or the specific facts of a legal situation should not go to a general AI tool. These categories carry extra privacy and liability risk. AI can help you understand general concepts, like what a legal term means or what a medication class does. Keep your specific situation off consumer platforms.

What to do instead

Replace sensitive values with placeholders before pasting. Use fake names and sample data for examples. If your business genuinely needs AI to process sensitive data, use a platform that offers a Business Associate Agreement (BAA) or enterprise data processing terms. For most everyday tasks, you can get the AI help you need without ever pasting anything sensitive.

Key takeaway

Treat AI tools like a public forum for anything sensitive. Passwords, customer data, unreleased plans, and personal medical or legal details should never go in. Use placeholders instead.