Personal data, secrets and internal information
Before entering data into a tool, check authorisation, purpose, service terms, retention and access. Business and personal accounts may have different settings and contracts. Do not assume confidentiality merely because a service is paid.
Use only the information needed. Removing a name may not anonymise a document: roles, dates and events can also identify someone. Never share passwords, API keys or authentication codes. Sensitive data requires its own assessment.
To test a customer-service summary, create clearly labelled fictional examples. Before using real conversations, confirm permissions and data handling with the people responsible in your organisation.
Being able to upload a file does not mean you are authorised to do so.
Try it yourself
Write a request to summarise a public document. Add an output format, a rule for missing information and a verification step. Test two versions and record the differences without including personal data.