An AI company contacted me about my data. What should I do?

If an AI company contacts you about your data, begin by clarifying the request before sharing records or negotiating only the first number mentioned. Ask who the buyer is, what use they are considering, what they want to review, and how they expect the process to unfold. The first goal is informed control, not immediate disclosure.

What should I do first?

Document the inquiry and identify a small internal group that can evaluate it. Preserve the original message, note the company and contact, and write down any claims about intended use, timing, scope, or budget. A clear written record helps distinguish what was actually requested from assumptions that can arise during an early conversation.

Which questions should I ask the buyer?

A focused first conversation should make the request more concrete. Ask the buyer to explain the following in plain terms:

• Buyer identity: the legal entity, relevant affiliates, decision-makers, and whether another party is acting on its behalf.

• Intended use: whether the inquiry concerns evaluation, training, testing, research, product development, or another defined purpose.

• Requested records and scope: the workflow, record categories, time period, formats, access level, and any expectation of ongoing updates.

• Process, timing, and budget: what decisions remain, how diligence would proceed, when a proposal may be made, and whether a commercial range has been considered.

What should I avoid sending immediately?

Do not send raw files, production-system access, credentials, detailed customer information, or broad internal exports simply because a buyer asks. Avoid informal statements that appear to grant rights, confirm ownership, or promise exclusivity. Early interest can be explored through a high-level description of the business, the relevant workflow, and the kinds of records that may exist.

Why should disclosure happen in stages?

Staged disclosure keeps information proportionate to what has been established. A first stage can describe the operating context, source systems, broad time coverage, record connections, and likely constraints. If a credible fit emerges, more detailed questions can be addressed under appropriate confidentiality, technical, privacy, and legal review.

Confidentiality matters, but it is not a substitute for clarity about purpose, access, retention, and use. A confidentiality agreement should be considered in the context of the actual request and the company’s obligations. It should not become a reason to skip a disciplined assessment of what is being shared.

How should I assess rights and operational feasibility?

Identify where the records came from, which systems hold them, who may have contractual or other interests, and which privacy, confidentiality, security, retention, or regulatory questions need review. Separately, ask whether the records can be recovered in a coherent form and what effort would be required to locate, connect, prepare, or exclude material.

Why is the first offer only one data point?

A first offer may reflect a buyer’s immediate use case, risk tolerance, timing, or negotiating position. It does not establish the only possible value or the most appropriate rights package. Price should be considered alongside scope, purpose, users, term, exclusivity, delivery, retention, derivatives, sublicensing, payment protections, and future options.

When should I involve advisors or seller representation?

Involve counsel, privacy or security leaders, technical owners, and other advisors when the request raises questions in their areas. Their role is to help the company understand constraints and decisions, not to create unnecessary disclosure. Independent seller representation can help organize the company’s position, test demand, coordinate diligence, and compare approaches while the owner retains final authority.

ROZETA is an independent seller representative. It works on the seller side of an AI data licensing process. The operating company continues to control whether buyers are approached, when identity is disclosed, what materials are reviewed, and whether any agreement is accepted.

First-call checklist

• Keep the discussion exploratory and document what the buyer says.

• Ask for the intended use, proposed scope, buyer identity, timeline, and decision process.

• Describe the business and workflow at a high level without providing raw files.

• Identify internal owners for legal, privacy, security, technical, and commercial questions.

• Agree only to the next proportionate step after the request and constraints are understood.

What are common red flags?

Be cautious if a buyer will not identify the relevant entity or use case, pushes for raw records before defining scope, treats confidentiality as a substitute for permissions, requests broad or perpetual rights without explanation, or discourages independent advice. These signals do not prove bad intent, but they warrant slower, more structured review.

Related guidance

Understand what AI data licensing means

Compare an existing AI data licensing offer

Review rights, privacy, and seller control

Frequently asked questions

Should I tell the buyer everything I know about our records?

No. Start with the information needed to understand the request and evaluate whether a controlled next step is justified. Disclosure can become more specific as the opportunity is clarified.

Do I need a signed agreement before the first call?

The appropriate safeguards depend on the conversation and information involved. A first discussion can often remain high level while the parties decide whether formal confidentiality terms are needed.

Can I negotiate directly with an AI buyer?

Yes. The company may choose to negotiate directly or use seller representation. In either case, owners should preserve control of material disclosures, terms, and the final decision.

Does inbound interest mean my records are valuable?

It may indicate a question worth evaluating, but it does not establish demand, a viable use case, rights, technical fit, price, or a transaction.

Next step

Request a confidential assessment before responding in detail

This guidance is general owner education. Market interest, technical fit, rights, preparation burden, and agreement terms vary by opportunity and should be evaluated in context.