What You Should Not Paste Into It

Where it goes

Text pasted into a service goes to that company's systems, where it is stored and may be reviewed or used to improve the product.

The specifics vary by service and by plan, and they change, which is itself the point.

You are agreeing to whatever the current terms say, on behalf of somebody who did not agree to anything.

That is a different matter from the tool being useful, and it applies regardless of how good the answer is.

What should not go in

• Customer names and contact details.
• Anything about a customer's situation.
• Contracts and signed agreements.
• Staff records and anything about a person.
• Financial details and account information.
• Anything under a confidentiality clause.

The second is the one people miss. Removing the name from a description of somebody's dispute, house, or medical situation does not necessarily make it unidentifiable, particularly in a small community where the details are distinctive.

Your obligations do not pause

Which is the part that makes this more than caution.

Canadian privacy law makes you responsible for personal information you hold, including when you pass it to somebody else to process.

Sending it to a third-party service is a disclosure, and your privacy policy probably does not mention it.

Professional confidentiality obligations, where you have them, do not have an exception for asking a tool.

And a contract with a confidentiality clause binds you the same way whether the recipient is a person or a service.

None of this is theoretical, and none of it is likely to be enforced against a small business, which is why the habit forms before anybody thinks about it.

Paste the situation, not the document

Which resolves most cases with no loss of usefulness.

The tool does not need the customer's name, address, or the actual text of their message.

It needs to know that a customer is unhappy about a delay, wants a partial refund, and has been polite about it.

Describing the situation in your own words gives it everything it needs and sends nothing that belongs to anybody else.

The same applies to contracts: describe the clause and the concern rather than pasting the agreement.

This takes an extra minute and removes the entire problem.

A worked example

A business pasted a difficult customer email in to get help drafting a reply, including the customer's name, address, and details of a dispute about work at their property.

The reply produced was useful.

What had also happened was that a named individual's address and a description of a dispute at their home had been sent to a company the business had no agreement with, and the customer had no idea.

They changed to describing the situation instead, which produced replies of the same quality.

Nothing came of the original incident, as is usual.

The habit was the thing worth changing rather than the consequence.

Watch what else has it built in

Since pasting is not the only route.

These features are appearing inside tools you already use: email clients, document editors, customer systems, and support desks.

Those may be sending content automatically rather than waiting for you to paste it.

Check what any such feature does with the content before enabling it, particularly in anything holding customer records.

And check whether a supplier or member of staff has enabled one without discussing it, which is how most of this starts.

The question to ask is simply where the text goes and whether it is retained.

Write down what is allowed

Since staff will use these tools whether or not you have a position.

A short note is enough: what may be pasted, what may not, and who to ask when unsure.

Three lines pinned somewhere is more effective than a policy nobody reads, and considerably more effective than silence.

Include the reason, since somebody who understands why will apply it to a case you did not anticipate.

Banning it entirely tends to produce the same behaviour without anybody mentioning it, which is worse than a workable rule.

Check the terms of what you use

Because they differ meaningfully and change.

Some services retain and use what you send, some retain briefly for safety purposes, and business plans frequently offer different handling from free ones.

If you are going to use these tools with anything sensitive at all, read the current terms for the specific service and plan.

Note the date you checked, since this area has been moving quickly.

And where the answer is unclear, treat it as retained, which is the safe assumption.

The output can carry it back out

A second-order risk worth understanding, since it runs the other way.

Anything pasted in can appear in what comes back, so a draft reply built from a customer's pasted email may reproduce phrasing, names, or details you did not intend to keep.

That matters most when the output goes somewhere public, such as a page, a listing, or a review response.

Read any output that came from pasted material specifically for details that belong to somebody else before it goes anywhere.

The same applies to a response drafted from one customer's complaint being reused for another, which happens more often than it should.

The counter-case

This can be overdone.

Most of what a small business would paste is not confidential at all: a draft of your own text, a question about a technique, a rewrite of something already public.

Treating every use as a privacy incident produces a rule nobody follows and loses a genuinely useful tool.

And business arrangements exist specifically to handle this, which is worth the cost for a business using it regularly.

Describe the situation rather than pasting the document, keep customer details out, and write down three lines about what is allowed.

The rule

1. No customer names or contact details.
2. No details that identify somebody.
3. No contracts or confidential documents.
4. Describe the situation instead.
5. Check built-in features before enabling.
6. Read the terms for your plan.
7. Write three lines for staff.

Step four is the whole of it in practice, since describing a situation in your own words produces the same quality of answer and sends nothing belonging to anybody else.

What you are actually holding is covered in the personal information you did not realise you held.

Frequently asked questions

West Coast Media Solutions Inc. provides web design, web development, hosting, digital marketing, and business consulting to organisations across Canada, drawing on more than twenty-five years in the field.