ChatGPT for small businesses: quotes, contracts and email without client data

· Zecretly

The short answer: In many small businesses, employees already use ChatGPT or Claude, often with a personal account. Instead of banning it, give your team a simple rule and a tool: client data is replaced with placeholders in Zecretly before anything is uploaded, and the answer is restored afterwards on your own computer.

Why does a ban rarely work?

Once people have seen how quickly ChatGPT can rewrite a quote or summarize a long email, they don't want to go back. A ban often just moves the work to personal phones and personal accounts, where nobody knows what gets uploaded. That's why our approach is to protect, not prohibit. Working with ChatGPT stays allowed, but your clients' real names, addresses and amounts stay behind.

What rule fits on one page?

A rule nobody reads protects nothing. Three sentences are enough:

  1. Client data only goes out protected. Right-click a file in File Explorer and choose “Mit Zecretly schützen” (the menu entry is in German). For text: select it, press Ctrl+Alt+Z, then paste.
  2. Read it before you upload it. Zecretly doesn't find every value. Checking the protected copy takes a minute.
  3. Restore the answer before it goes to the client. Open the answer in Zecretly, or select the text and press Ctrl+Alt+Z again.

Anyone using a personal account should also turn off training on their chats there. How to do that in ChatGPT and Claude is covered in Protect client data without a costly business plan.

What kind of work is a good fit?

Zecretly protects Word, Excel, PowerPoint and PDF files as well as emails in .eml and .msg format. That covers most office work:

An example with made-up data: a client writes, "Hello, this is Sandra Meier. Could you update the CHF 18,400 quote by Friday?" In the protected version, the name and the amount become placeholders like [PERSON_1] and [BETRAG_1]. ChatGPT writes a friendly reply using the placeholders, and Zecretly puts the name and the amount back afterwards.

How should the team phrase requests?

For restoring to work, the placeholders in the answer must look exactly like they do in the protected version, square brackets included. If the service turns [PERSON_1] into "Ms. Person" or makes up a name, Zecretly can no longer find that spot. One sentence at the end of every request is enough, and it belongs in your one-page rule:

"Leave all placeholders in square brackets exactly as they are."

An example for a quote: "Make this quote to [PERSON_1] shorter and easier to read without changing any prices or dates. Leave all placeholders in square brackets exactly as they are." Before restoring, it's worth a quick look to check that all placeholders are still there. If one is missing, the service rewrote the sentence, and you fill in the value by hand.

How do I keep projects apart?

In Zecretly, files that sit directly in the same folder form a case file. They share placeholders, so the same person gets the same placeholder in the quote, the contract and the email. One folder per client or project keeps everything cleanly separated. Case files are stored encrypted on the computer of whoever protected the files. After 30 days without use, Zecretly deletes a case file the next time it starts.

Is a business plan still worth it?

For ten people, ChatGPT Business on an annual plan costs 10 × USD 20 × 12 months, or USD 2,400 a year (price according to OpenAI, as of October 30, 2026). In return you get central account management, and OpenAI doesn't use your data for training by default. The data still goes to the provider, though. If your team works with ChatGPT or Claude every day, a business plan can make sense. Combined with Zecretly, only placeholders leave your business.

What can't Zecretly do?

A last name without any context, like "call Rossi back", can slip through. Zecretly recognizes names when they come with a title, a known first name or a column header like "Customer", or when the name appears that way elsewhere in the document. Descriptions, text in images and scanned PDFs without a text layer aren't reliably read, and PDFs lose their layout. Zecretly can't tell you whether your business may share certain data with a service. Check that with your data protection officer or legal advisor. In Switzerland the Federal Act on Data Protection applies, in the EU the GDPR.

Sources

Try Zecretly: The app works locally on your computer. Download Zecretly or read the help page first.