Right now, somewhere in your office, someone is pasting a client email into a free ChatGPT account to get help drafting a reply. They're not being reckless. They're being resourceful — getting a job done faster with a tool that genuinely helps. But it's a fair question to ask where that client's information just went, and most owners have never been given a straight answer.
Here's the straight answer, without the scare campaign.
There are two different things people worry about and it helps to separate them. The first is training — the fear that what your staff type gets absorbed into the AI and shows up somewhere else. On free, personal accounts this is a real consideration: what's typed in can be used to improve the model unless someone goes and finds the setting that turns it off. On the business and team plans from the major vendors, this is settled — they commit not to train on your data, full stop. That single difference is most of the reason to get your team onto a company plan.
The second worry is storage, and this is the one people miss: "not trained on" is not the same as "not stored." Your conversations sit on the vendor's servers until someone deletes them, plus a short purge window after that. While they're there, they're subject to the ordinary realities of any data held by a third party — including legal process, since courts can order a vendor to preserve conversations during a dispute. A retention setting is a sensible default, not an iron guarantee.
None of this is a reason to keep your team off AI. It's a reason to be deliberate, and the deliberate version is genuinely simple. Get everyone onto one company-controlled plan rather than a scatter of personal accounts. Keep the genuinely sensitive categories — tax file numbers, bank details, anything that would breach client confidentiality if it leaked — out of casual chat. Do those two things and you've handled the overwhelming majority of the real risk, without anyone needing an IT department or a law degree.
The honest framing to give your team is the one you already use for work email: nobody's reading over your shoulder, but it's a work system, the company owns the data, and you treat it accordingly. That's a standard people already understand, and it never sets up a nasty surprise later.