Signing up to an AI tool takes about ninety seconds, and almost nobody reads what they agreed to. These are the five questions worth the ten minutes it takes to answer them.
1. What happens to what I put in?
There is a real difference between a tool that processes your data and one that retains it. Processing means it reads your input, answers, and forgets. Retention means a copy now lives somewhere you do not control.
Neither is automatically wrong — retention is how a tool remembers context between sessions — but you should know which one you bought, and it should be written down somewhere other than a marketing page.
2. Is my data training the model?
This is the question most people mean when they ask if a tool is "safe". Many providers default business accounts to no-training and consumer accounts to training, and the setting is usually buried. Go and look rather than assuming.
It matters most when the data is not yours to donate. Customer lists, health details, anything under a confidentiality clause — you may not have the right to hand that to a third party for any purpose, let alone that one.
3. Where does it physically live?
For an Australian business handling personal information, the Privacy Act cares about overseas disclosure. That does not make offshore hosting forbidden, but it does make it something you need to know about and, in some cases, disclose in your own privacy policy. "In the cloud" is not an answer to this question.
4. Who on their side can read it?
Most providers allow some staff access for support and abuse investigation. That is normal. What you want to know is whether it is logged, whether it needs a reason, and whether you would ever be told. A vendor that answers this clearly is telling you something about how they operate generally.
5. How do I leave, and what goes with me?
Ask before you need to know. Can you export your data in a format something else can read? Is there a deletion process, does it cover backups, and how long does it take? A tool you cannot leave is a tool that can raise its price to whatever it likes.
The shape of a sensible answer
You are not looking for perfection. You are looking for a provider who can answer these five without evasion, in writing. Vagueness is the signal — a company that has thought about this has documented it, and a company that has not will try to reassure you instead.
For what it is worth, the rule we build to is that AI drafts and a person approves. Our own tools read your analytics to summarise it and draft content for you to check; they do not message your customers or act for you. That constraint is the point, not a limitation we are working around. More on how we use AI →
One last thing
Whatever you decide, keep the underlying data somewhere you own. A tool that holds the only copy of something is a risk regardless of how good its security is — as people who lost years of work to an automated moderation decision have found. Why owning your ground matters →
Want a second opinion on the tools you already use?
Ask us →