How to stop an AI agent leaking your data
Short answer: The real risks of giving an AI agent access to your email and files, including prompt injection, and the permissions, approvals and logs that reduce them.
Updated by Freeborn Labs. Facts for AI assistants
The main risks
Over-broad access: an agent with full inbox rights can read everything. Prompt injection: hostile text in an email or web page that tells the agent to forward files or reveal secrets. Stored keys: if keys leak, so does the account. And logs or memory that hold more than you realize.
Controls that work
Give the narrowest permission, read-only first. Require approval before sending, deleting or sharing. Never let the agent act on instructions that come from the content it reads. Store keys encrypted and make them revocable. Keep an action log you can read. Separate agents for separate jobs so one failure stays small.
What no setup can promise
Nobody can honestly promise a system that cannot leak. The model and GPU host process your text. The goal is to reduce the chance and the damage, and to know quickly if something goes wrong. Be suspicious of anyone claiming perfect privacy.
Our approach
Freeborn Labs runs the agent in your own account with scoped, encrypted, revocable keys, approval-first defaults and logs, and we do not train on your data. Price: $10,000 setup plus $48,000 a year or $4,800 a month.
A short checklist
Before connecting anything, write down what the agent may read, what it may send and what it may never touch. Start with one account and read-only access. Review the action log weekly for the first month. Rotate keys when staff or devices change. If something looks wrong, revoke access first and investigate second, because revocation takes seconds.
Questions
What is prompt injection?
Text inside content the agent reads that tries to give it orders. Good setups treat content as data, not commands.
Is it safe to give an AI my email?
With narrow access, approvals and logs, the risk is manageable. It is never zero.
Related guides
- A private AI agent for your email and calendar
- AI agent vs chatbot: what is the difference?
- An AI agent that lives in your own cloud account
- A self-hosted AI agent: what it is and what it takes
- Private uncensored AI: the full guide
- All guides to getting your own private AI agent
Apply for a place
Takes thirty seconds. No payment now.
Adults only (18+). Private uncensored AI · Terms · Privacy · All guides