TOPIC 04 OF 05
Privacy and confidential information
Minimize before promptingPrompts, uploads, logs, tool calls, and outputs may contain personal data, client information, business secrets, credentials, or regulated records. What happens to that information depends on the product, account, settings, contract, retention rules, integrations, and organization policy.
Instead of pasting a customer complaint with a name, account number, health detail, and full history, remove identifiers and include only the facts needed to improve the response template.
‘Do not remember this’ inside a prompt is not a privacy control. Check approved tools, data terms, retention, access, location, deletion, and whether the task can use synthetic data.
Classify the information, remove what is unnecessary, use an approved environment, and keep secrets and credentials out of prompts.