Use AI without getting burned.
AI is a force multiplier and a data leak waiting to happen if you’re careless. This lesson is the safety basics everyone should have: what you must never paste, where your data actually goes, the quiet risk of “shadow AI,” and a few simple rules that keep you protected without slowing you down.
The mental model
AI is powerful but leaky. Safety comes down to two questions: what am I sharing, and where does it go?
Every time you paste something into an AI, you’re sending it to someone else’s computer. Often that’s fine. Sometimes it’s a serious problem. The whole of personal AI safety is learning to tell the difference before you hit enter — because once something’s sent, you can’t pull it back.
Treat the prompt box like a public postcard. Before pasting, ask: would I be comfortable if this ended up somewhere I didn’t control? If not, don’t paste it as-is.
Step 01 What never to paste
Keep these out of any AI tool unless you’ve confirmed it’s approved and protected for that use:
- Secrets and credentials — passwords, API keys, access tokens.
- Personal data (PII) — names with sensitive details, IDs, financial or health info.
- Customer and confidential data — anything covered by a contract or NDA.
- Regulated data — anything under rules like HIPAA, GDPR, or similar.
Step 02 Know where your data goes
Not all AI tools treat your data the same. Before trusting one with anything sensitive, check:
The “is it private?” check
- Does it train on your inputs? Many consumer tiers may; many business/enterprise tiers don’t.
- Consumer vs business tier. Business and enterprise plans usually add data protections and admin controls.
- Is there a clear policy? If you can’t tell what happens to your data, treat it as not private.
Step 03 The shadow-AI risk
“Shadow AI” is employees quietly using random AI tools with company data — no approval, no protections. It’s usually well-intentioned and genuinely risky: confidential data flowing into tools nobody vetted. Naming it is the first step to fixing it.
Step 04 Simple personal rules
- Run the postcard check before pasting anything sensitive.
- Use approved tools for work data — not whatever’s handy.
- Anonymize — strip names and identifiers when the AI doesn’t need them.
Your challenge: audit your own habits
Take an honest look at how you use AI. Then:
- List the AI tools you currently paste work into.
- For each, check whether it trains on inputs and what tier you’re on.
- Write your personal “never paste” list of data types.
- Pick one safer habit to adopt this week (anonymizing, an approved tool).
That’s the difference between using AI and getting burned by it. Next, turn personal safety into a business AI policy your whole team can follow — that’s Lesson 2.
What you can do now
- Ask “what am I sharing and where does it go” before pasting
- Recognize the data types you must never paste
- Check whether a tool trains on inputs and is private
- Understand and name the shadow-AI risk
- Adopt simple personal rules that keep your data safe