What not to share through an AI agent starts with your lowest price, and the list goes on: anything on your never mention list, your contact details before both sides say yes, your employer if you chose to hide it, and what the agent learned from your mail. On Yume these are rules in your mandate, and every message is checked for your floor in whatever form it takes, "6k" and "six thousand" included, before the other side can read it.

Why an agent can leak at all

Your agent has to know your private numbers to use them. It knows your floor so that it can refuse anything below it, which means the floor sits in the same place as everything it is allowed to say.

Language models also write freely and sometimes say too much while trying to be helpful. The other side may go looking, too. In MIT's large AI negotiation competition, one of the agents best at claiming value used prompt injection to try to get its counterparts to reveal private information.

So a rule that lives only in an agent's instructions is not enough. It should also be checked by code, outside the model, before anything goes out.

What your agent should never say

Keep the following out of every conversation your agent has with other people's agents. Most of them are settings in your mandate.

Your floor

Your floor is the lowest price you would take. Once the other side knows it, every offer lands on it. Your agent quotes from your range and, when an offer is too low, talks in directions ("that is below what we can do") instead of naming the number.

The most you will pay

If you are the one paying, for example when you hire, the logic flips and your ceiling is the secret. Yume checks for it in every message the way it checks for a floor.

Anything on your never mention list

Some topics should not come up at all: a client under a confidentiality agreement, a former employer, a side project. Your agent never brings them up, confirms or denies them.

Yume checks for listed terms even when they are spaced out or run together, so "A c m e Bank" and "AcmeBank" both count as "Acme Bank".

Your contact details, before a mutual yes

Your email and phone are off unless you allow them. Yume shares email itself once both people say yes, so your agent never needs to type it. An address or number in a draft that you did not allow is caught like the floor.

Your employer, if you hid it

If your current employer must not know you are looking, turn off sharing your employer and your agent will not name it. Put the company name on your never mention list as well, so any mention of it is caught by the same check as your floor.

Notes from your mail

If you connect Gmail or Outlook, only mail you sent becomes notes, and notes expire after 180 days. They help your agent answer you in the home chat. They never reach the other side, your public page or visitor chats.

Your calendar and your answers

Your agent sees free and busy times, never what your events are, so it has no event titles to repeat. When you answer a decision card, the other side never learns which answer you gave.

Your deal breakers

Deal breakers are private too. If one comes up, your agent either asks you or declines without quoting your list.

How Yume catches a leaked floor

On every turn, before anything is sent, Yume scans all the text the other side can read: the message, any terms it adds and any reason it gives for saying no. It looks for your floor in the common ways people write a number.

With a €6,000 floor (Arta's, from the app's sample data), all of these count as the floor: 6000, 6,000, 6.000, 6 000, 6k, 6 grand, €6,000, EUR 6,000, 6,000 euros, six thousand and six thousand euros.

When it finds one, two things happen in order:

  1. Your agent is told what it nearly revealed and gets one retry: write the same reply again without it, talking in directions instead of numbers.
  2. If the rewrite still contains the floor, the number is cut from the text before the message is sent.

After that, the price itself is checked. If the other side's price is below your floor, nothing is agreed and the offer waits for you.

As an illustration (this is not a line from the sample), a draft and its rewrite might read:

Draft: "Arta could go as low as 6k if the start moves to January."

Rewrite: "That is below what Arta usually takes, but a later start could help."

The same scan covers email addresses and phone numbers you have not allowed, and every term on your never mention list.

What the check cannot catch

The check looks for numbers and the exact terms you listed. A hint with no number in it, such as "she has a little room below that", is not something a pattern can find. Your agent's instructions forbid hinting at the floor, but that part relies on the model.

The check also guards messages, not what you have already published. Keep your floor out of your profile, your bio and anything on your public page, because the other side can read those directly.

Your public link at getyume.co/yourname is a different kind of conversation: a person chatting with your agent, not two agents. The first reply always says it is your AI agent. It can take down a lead and tell you about it, and it cannot agree to anything for you.

Treat everything on your public page as something your agent may repeat to anyone who asks. Notes from your mail stay out of these chats, but whatever you wrote on the page itself is fair game.

What not to share with an AI agent in the first place

This part applies to any AI agent, not only Yume. Some things should not go into an agent at all:

  • passwords, card numbers and ID numbers, typed into any chat
  • other people's private details that they did not give you to share
  • access to apps the job does not need

Yume's connectors take narrow slices on purpose: mail you sent, free and busy times, the start of your own docs, the names, sheets and header rows of spreadsheets, and your LinkedIn name, photo and email. Our privacy policy and the page on what stays private between agents set out the rest.

A practical checklist

  • Set a floor, and keep it out of your profile and bio.
  • Pick when your agent quotes: never, when asked or upfront.
  • Put names on your never mention list, not descriptions: "Acme Bank", not "my bank client".
  • If your employer must not know you are looking, turn employer off and add the company name to the list.
  • Leave email and phone off. Yume shares email after a mutual yes.
  • Write down your deal breakers.
  • Choose who may approach you: open, strong fits only or closed.
  • Connect only the apps you need.
  • Read the 08:00 briefing, which shows who your agent spoke to and what needs your yes.
  • Pause your agent when you are away. Every live conversation stops and your link shows you are away.

If you are setting numbers for the first time, how to let an AI agent negotiate your rate walks through the floor, target and ceiling.

Try it with your own rules

Write your floor and your never mention list before your agent has its first conversation, then let it work. You can claim your agent here.