The Vendor You Never Chose

Notion told customers this week that some of their AI chats are in the hands of attackers.
Its own systems weren’t breached.
Here’s what happened.
Notion uses a company called Fireworks AI behind the scenes.
Fireworks ran some of the open-weight models inside Notion AI.
It also processed stored chats for Insights, the feature that shows admins how their team uses AI.
In October attackers got into Fireworks.
On November 2 Fireworks told Notion the exposed dataset held only synthetic test data.
Six days later it confirmed a second dataset.
That one held real Notion AI chat transcripts. 😳
Fewer than 1% of Notion workspaces are affected.
Most of the transcripts carry no label tying them to a person or a company.
They still contain whatever people typed.
Notion’s advice to affected customers: “We recommend that you treat this data as if it were exposed.”
Here’s the line that should bother you.
Fireworks had contractually committed to zero data retention for Notion’s data.
The transcripts were sitting in its storage anyway.
Think about that.
A contract said nothing would be kept.
Something was kept.
Notion has switched off Insights and stopped running models through Fireworks.
Fireworks serves roughly 10,000 businesses, Uber and Shopify among them, according to Forbes.
Let me explain why this is your problem even if you’ve never opened Notion.
Last week it was Binance, where the door was an internal AI tool with the keys to everything.
This one is quieter and closer to home.
Every AI feature you use sits on a chain of companies you never picked.
You chose the app.
The app chose a model host.
Your chats went wherever the last company in that chain put them.
What to do today:
If Notion emailed you, follow its instructions to see which chats were exposed.
Rotate any password, API key or login you ever pasted into Notion AI.
Make it a house rule that credentials never go into a chat box, in any AI tool.
Ask your other AI vendors one question: who else touches my data?
Speaking of what stays yours...
What you type into someone else’s tool lives wherever they put it.
How your business does the work lives in your head, and that part is still yours.
Write it down once and Claude can run it your way every time.
I put together a free workbook for turning one real process into a reusable Claude Skill.
It walks you through a 24-question interview that pulls the decisions and shortcuts out of your head.
You also get a blank SKILL.md template, a 30-point QA scorecard and a worked example with every file included.
There’s a 5-day sprint plan to get from idea to tested Skill in a week.
A prompt tells Claude what to do once.
Teach it how you do it, and it does that every time. 😏
Did You Know?
In 2013 attackers stole 40 million card numbers from Target.
They got in with a login stolen from one of Target’s heating and refrigeration contractors.
Thirteen years later the contractor is an AI host and the haul is your chat history. 🙄
A CRM so smart, it updates itself.
HubSpot's CRM is so smart, it now updates itself. Calls get logged and summarized the moment they end. New leads get researched and a first outreach drafted, automatically. Deals move forward on their own, with next steps flagged before you have to ask.
Even the one repetitive task you've been meaning to fix can now run itself, no code required. Customers using it are already seeing the difference.
This isn't the CRM you have to work hard to figure out. It's the one already working before you log in.
🗞️ The Tip AI News 🗞️
United just banned your AI agent from booking flights.
On Wednesday the airline said it will block third-party AI agents from making, changing or servicing tickets.
That covers its website and app, plus travel agencies and aggregators.
The revised contract applies even when the passenger approves what the agent does.
United can also cancel a booking an agent made or changed, without notice.
Here’s United’s reasoning.
Handing an agent your login can expose personal data, trigger purchases you didn’t want and put your miles at risk.
Check-in also requires the passenger to confirm things like banned items in a bag.
Here’s what still works.
An agent can search and compare United fares.
Kayak, Hopper and Google Flights carry them as before.
You press the buy button yourself.
Speaking of a pattern...
In October the banks locked agents out of customer accounts.
Last week Visa showed that failed shopping agents still buy something 54% of the time.
Now an airline has written the ban into its contract.
Not everyone agrees.
Southwest launched a ChatGPT plug-in in October so customers can shop for flights inside the chatbot.
Walmart partnered with Meta’s Muse agent, and Amazon blocked it.
One analyst’s read is that United wants to avoid another Google-like middleman between it and its customers.
The agents are ready to shop.
Whether the store lets them in is a different question. 👀
⏰ Epic Marketing Summit, Miami
I’m speaking at Epic Marketing Summit on January 19 and 20 at The LAB Miami in Wynwood.
It’s two days, in person only, built for founders, coaches, agencies, creators and software businesses.
Day one is about automating the busywork and building a first AI product.
The second day covers AI marketing, traffic and automation.
My panel is Humans + AI: how founders use AI Employees to grow without more hours.
Early bird pricing ends Saturday, November 14, at 11:59pm ET.
General Admission is $467 now and $997 after.
VIP is $827 now and $1,497 after.
The VIP ticket adds a dinner on night one and a yacht evening on Biscayne Bay on night two.

Over to You...
Think back through what you’ve pasted into an AI chat this year and list every login.
Then change them, starting with the ones you’d hate to see in a stranger’s hands. 🔥
Founder, AI Persona Method | TheTip.ai
Get paid to solve problems like this → AI Certified Consultant
PS.Yesterday I said Thursday’s send would have the ANT price. I meant next Thursday, November 19, the morning after pricing night. Until then the range in the filing is still $70 to $78.

» Join the AI Money Group «
💰 AI Money Blueprint: Your First $1K with AI - Learn the 7 proven ways to make money with AI right now
🚀 Zero to Product Masterclass - Watch us build a sellable AI product LIVE, then do it yourself
📞 Monthly Group Calls - Live training, Q&A, and strategy sessions with Jeff
Sent to: {{ email }}
Jeff J Hunter, 3220 W Monte Vista Ave #105, Turlock,
CA 95380, United States
Don't want future emails?




