The number one reason small business owners hesitate with AI is not cost. It is a quiet worry: if I paste this into ChatGPT, where does it go?
That is a smart question, and almost nobody answers it honestly. So here is the plain-English line between what is fine to put into a public AI tool, what you should never put in, and when your business has outgrown the free tools entirely.
First, what actually happens to what you type
When you use a free, public AI tool, your text is sent to that company's servers to generate a reply. Depending on the tool and your settings, it may also be used to help train future versions of the model. It is not being read by a person sitting there judging you, but it is leaving your control, and on a free consumer plan you should assume it could be retained.
This is true across the board. ChatGPT, Claude, Gemini, and the rest all work this way. I am using ChatGPT as the example here because it is the name everyone knows, but the rules below apply no matter which tool you use.
That single fact draws the whole map.
Safe to paste freely
If it is not sensitive and not confidential, use AI all day long:
- Marketing copy, blog drafts, and social posts
- Generic emails and templates ("write a polite late-payment reminder")
- Brainstorming, summaries of public information, rewording your own notes
- Anything you would be comfortable reading aloud at a networking event
Never paste into a public AI tool
Treat these like you would treat your bank PIN:
- Customer personal info: full names tied to addresses, phone numbers, medical or financial details
- Payment data: card numbers, bank account numbers, anything that could enable fraud
- Passwords, API keys, or logins
- Signed contracts, employee records, or anything under an NDA
- Trade secrets: the recipe, the formula, the thing that is your business
The gray area: free vs. business tiers
Here is what most people miss: the paid business versions of these tools play by different rules. Business and enterprise plans (ChatGPT Team/Enterprise, Claude for Work, Gemini's business tiers) typically promise not to train on your data and offer real privacy controls. So the same sentence that is risky on a free account can be perfectly fine on a properly configured business plan.
If AI is becoming part of how you operate, the upgrade is usually worth it, and as I break down in what AI actually costs a small business, it is cheaper than people expect.
When you need a private setup instead
For some businesses (medical, legal, financial, or anyone handling a lot of sensitive customer data) the cleanest answer is to not send data to anyone's cloud at all. That is when I set clients up with a private AI assistant running on their own hardware, like a Mac Mini in the office, so the data never leaves the building. Full walkthrough here: your own private AI assistant on a Mac Mini.
It is not for everyone. But if data privacy is the only thing standing between you and using AI, it removes the obstacle completely.
What about Claude, Gemini, and the rest?
Short version: the same three-part rule applies to all of them. The big hosted models (ChatGPT, Claude, Gemini) have broadly similar privacy postures, with the same free-vs-business split. Where they differ is in the details: how their guardrails are tuned, what their enterprise agreements promise, and how each handles data retention. Plenty of serious organizations standardize on Claude specifically for its safety posture, and increasingly run AI on everything from customer support to writing production code.
Those differences (hosted vs. local models, how guardrails compare across platforms, and how to set policies that let a team use any of them safely) are worth a deeper look than this post can give. I will cover that comparison in a follow-up. For now, the rule below holds no matter which model you choose.
The bottom line
You do not need to be afraid of AI. You need a simple rule. Public tool, free plan: only paste what you would be fine making public. Sensitive data: use a business-tier plan with training turned off, or a private on-prem setup. Get that line right and you can use AI confidently instead of nervously.
Not sure which side of the line your business falls on? That is a free, 15-minute conversation, and you will leave with a clear, safe setup for your specific situation. Book at aiguyjosh.com/contact.