A bot is only as private as the access you give it and the things you tell it. A few habits keep the risk low.
This is an unofficial fan guide. Always check the app and your service settings for current controls.
Connect only what the job needs
- An email bot needs email. It doesn't need your calendar unless that's part of the job.
- Use a dedicated or shared work account when possible instead of your personal one.
- Review connections periodically and remove ones you no longer use.
Review before it sends or posts
For anything outgoing, have the bot prepare a draft and approve it yourself. That's the biggest practical control.
What to keep out of chats
- Passwords, recovery codes, and full account numbers.
- Highly sensitive personal or medical details unless you have a clear reason.
- Anything you wouldn't want summarized or stored in a conversation.