Talking to AI Without Exposing Your Data: Lessons from the Privacy Minefield