Read the Fine Print on Data Usage
The single most important question is: what does the company do with your data? Many free AI tools use the information you upload to train their models. This means your personal notes, unfinished drafts, and research could become part of the AI's knowledge
base, potentially influencing answers for other users. Look for a clear statement in the privacy policy that explicitly says your data will not be used for model training. Under India's Digital Personal Data Protection (DPDP) Act, 2023, using data for a new purpose, like AI training, may require your specific consent. If the policy is vague or reserves broad rights to use your content, it’s a major red flag.
Clarify Who Owns Your Notes
When you upload your intellectual property—your unique thoughts, analyses, and summaries—you should not have to give up ownership. Scrutinise the Terms of Service for any clauses about content licensing. Some platforms might state that by uploading content, you grant them a worldwide, perpetual license to use, modify, and distribute it. This could have serious implications, especially for original research or creative work. A privacy-conscious service will clearly state that you retain all intellectual property rights to the materials you upload. Losing ownership is a high price to pay for a quick summary.
Verify Your Right to Be Forgotten
What happens when you want to leave the service? Can you easily and permanently delete your data? India's DPDP Act grants individuals the right to request the erasure of their personal data. A trustworthy AI tool should provide a clear and accessible process for you to delete your account and all associated data. Be wary of platforms that only allow you to 'deactivate' your account, which often means your data is preserved on their servers. The ability to completely remove your academic footprint from a third-party service is a fundamental privacy right.
Assess the Information You're Sharing
Not all study notes are created equal. Before uploading anything, perform a quick personal risk assessment. Do your notes contain sensitive personal information? This could include names, contact details, confidential research data, or even personal reflections that you wouldn't want made public. Under Indian law, certain data like financial information, health conditions, and passwords are treated as sensitive. Submitting notes on general topics like historical events carries a lower risk than uploading case notes from a medical or law internship. The safest approach is to never upload any document containing personally identifiable or sensitive information to a consumer-grade AI tool.
Check the Company's Location and Governing Law
The company behind the AI tool is subject to the data protection laws of the country where it is based. While India's DPDP Act aims to protect the data of Indian residents, jurisdiction can become complicated with international companies. A privacy policy should state which country's laws govern the agreement. If a company is based in a country with weak data protection laws, you may have little recourse if your data is misused. While not always a dealbreaker, it is a factor to consider in your overall assessment of the tool’s trustworthiness.
Understand the Limits of Anonymization
Some services claim they anonymise data before using it for training. However, 'anonymization' can be a misleading term. Even if your name is removed, the unique content and style of your writing could potentially be used to re-identify you, especially if the material is published elsewhere. True anonymization is difficult to achieve, and you should be sceptical of claims that your data is completely untraceable once it enters a training dataset. The best protection is to use services that commit to not using your data for training at all.
