What Not to Paste into AI: A Plain-English Privacy Guide for Solo Businesses

Disclosure: Some links below are affiliate links. If you sign up through them, SoloStack may earn a commission at no extra cost to you. We only list tools we'd actually use. Prices change — confirm current pricing on each tool's site.

When you run a one-person business, you are also the compliance department. Nobody reviews what you paste into a chatbot before you hit enter — and AI assistants are most useful precisely when you feed them real material: the actual client email, the actual contract clause, the actual numbers. That tension deserves a clear rule, not a vague sense of unease. This guide gives you one: three buckets, a 30-second anonymizing habit, and the settings worth checking once.

Why this matters (without the scare story)

Two separate things can go wrong. The first is about the AI company: depending on the tool and your settings, your conversations may be stored, reviewed to improve the service, or used to train future models. Most major tools now let you limit this — but the defaults vary, and free consumer tiers are usually the loosest. The second has nothing to do with training: the moment client information leaves your machine, you've made a promise on someone else's behalf. If you've signed an NDA, or you handle other people's financial, medical, or legal details, "I pasted it into a chatbot" may simply not be a decision that was yours to make.

Neither of these means "don't use AI." It means know which bucket the thing in your clipboard belongs to.

The three-bucket rule

Bucket one: paste freely. Anything already public or generic — your own marketing copy, blog drafts, publicly listed prices, brainstorming, code without credentials in it. This is most of your day, and it needs zero ceremony.

Bucket two: anonymize first. Real work material where the useful part isn't the identity — a tricky client email you want help answering, a proposal you're pricing, an awkward negotiation. Swap names, round the numbers, strip anything that identifies a person or company. The AI's answer will be exactly as good; "a longtime client is unhappy about a missed deadline" gets the same quality of reply as the version with names attached.

Bucket three: never paste. Passwords, API keys, and anything from your password manager. Government ID numbers, full card or bank account details — yours or anyone's. Client data covered by an NDA or by law (health, legal, and financial records about identifiable people). And other people's private messages when you couldn't defend sharing them if asked directly.

Bucket	Examples	Rule of thumb
Paste freely	Your drafts, public info, generic questions	Already public, or yours alone
Anonymize first	Client emails, proposals, negotiations	The identity isn't the useful part
Never paste	Credentials, ID and account numbers, NDA-covered data	Not yours to share, or a key to something that is

The 30-second anonymize habit

Bucket two sounds like work, but in practice it's a find-and-replace reflex: "Acme" becomes "the client," "Sarah" becomes "the designer," "$4,850" becomes "about $5k," and delete the signature block. Do it in your notes app before pasting, not in the chat window. After a week it's automatic — and it has a side benefit: describing the situation generically often makes the AI's advice better, because it answers the pattern instead of getting distracted by details.

Five minutes of settings, once

Whatever assistant you use, open its data or privacy settings and look for three things: a toggle that limits your chats being used for model training, a temporary or incognito chat mode for one-off sensitive questions, and how to delete your history. Paid business tiers generally come with stronger data commitments than free consumer plans — it's one of the quieter reasons an upgrade can be worth it, alongside the capability jump we cover in our ChatGPT vs. Claude vs. Gemini comparison. If you're still assembling your toolset, our free-first 2026 starter stack notes which tools are sensible defaults for a business context.

One more place these rules apply: automations. A scheduled workflow that reads your inbox or files is "pasting" on your behalf, every day, without you watching. Before you wire one up, decide which folders and data it's allowed to touch — the same three buckets work. Our pillar guide to automating your week with scheduled AI covers starting with low-stakes data on purpose.

The client test

When a case sits between buckets, use this: would you be comfortable telling the client, in plain words, "I used an AI assistant to help draft this, and here's what I shared"? If saying that out loud feels fine, proceed. If it makes you wince, anonymize harder or keep it local. And if privacy settings and toggles feel like a lot, start even simpler — our gentle guide to AI for people who are bad at tech exists for exactly that.

Three buckets, one habit, five minutes of settings. Paste public and generic material freely. Anonymize client work with a 30-second find-and-replace — the advice quality doesn't drop. Never paste credentials, ID numbers, or NDA-covered data. And check your assistant's training toggle once, so the default isn't deciding for you.

Privacy for a solo business isn't a policy binder — it's a clipboard habit. Sort what you share into three buckets, and you get the full benefit of these tools while staying the kind of professional whose clients never need to ask what happened to their information.