UI warns users not to enter sensitive data

GDPR Article 5(1)(c) data minimization applies to what users are encouraged to submit, not just what the application collects programmatically. Developer tools, customer support AI, and general-purpose chat interfaces are contexts where users routinely paste credentials, API keys, database connection strings, and personal account details — often because they are troubleshooting and it is the fastest way to show the problem. Without a visible advisory, users have no prompt to reconsider. A single line of placeholder text or helper text shifts user behavior at essentially zero implementation cost.

Update the AI chat input placeholder or add adjacent helper text. Placeholder text alone is insufficient — it disappears when the user starts typing — so pair it with persistent helper text below the input.

<textarea
  placeholder="Ask a question... (please don't share passwords or API keys)"
  className="..."
/>
<p className="text-xs text-muted-foreground mt-1">
  Do not share passwords, API keys, or sensitive personal information.
</p>

For developer tool contexts where API keys are a specific risk, be explicit: "Do not paste API keys, database URLs, or credentials." Keep the text short — a sentence that users actually read is better than a paragraph they skip.