What can Claude never do, no matter what?
Some rules aren't a setting you can flip — they're baked into Claude itself, the same way every car ships with brakes no matter who's behind the wheel. Claude's trained to spot a manipulation attempt even when it's dressed up official or urgent — so if a phishing email says "wire money right now," Claude treats it exactly like the red flag it is. It also scans documents, emails, and web pages before acting on anything in them, because scammers love hiding sneaky instructions inside a file, hoping Claude just follows along. And a few doors just stay bolted shut, period: no purchases, no opening accounts, no buying or selling stock, no handling a full credit card or ID number.
Learn more: Use Claude Cowork safelyWhat are Manual, Auto, and Skip mode?
Think of it like training a new hire — you decide how much they check in before acting. Manual: Claude asks before every single step. Slowest, safest, and exactly where you want to be for anything touching money, contracts, or a client's private info. Auto: Claude keeps moving but still double-checks itself and stops the second something looks off — good once you've built up some trust. Skip: Claude just goes, no asking (deleting a file still always asks, no matter what) — save this for the low-stakes stuff, never money or client info. Start on Manual. Level up to Auto when you've earned it.
Learn more: Get started with Claude CoworkWhat do the permission pop-up buttons actually mean?
Allow once: Claude does the one thing, one time. Your safest bet, always. Allow for this task: Claude's cleared for the rest of what you just asked, then it resets next time. Always allow: a standing yes from here on out — fine for something repetitive and low-risk, never for money or client info. Decline: does what it says on the tin. A few things always ask no matter what you've picked before — deleting a file, typing something sensitive into a website, sending money, or messing with your own permission settings. Simple rule: client info, your money, or anything you can't undo? Allow once. Every single time.
Does Anthropic use my chats to train Claude?
Nope, not unless you say yes. Default is off — your chats hang around for 30 days, then they're gone. Opt in, and they can stick around up to 5 years to help train future Claude. Flip the switch anytime in Privacy Settings.
Learn more: Anthropic's consumer privacy updateIs it safe to paste my client's info into Claude?
Probably fine — just don't get sloppy about it. Black out account numbers and ID numbers before you paste, purely out of habit, even when nobody's making you. And remember: your brokerage or MLS might have its own rules stacked on top of whatever Claude allows. Those still apply to you.
What happens when I connect Gmail, Drive, or Calendar?
Connecting your Google account isn't handing over your password — it's more like a hotel key card. It opens specific doors, and you can cut it off anytime. Gmail: Claude can search, read, and draft right away, but sending or forwarding still asks first by default. Drive: reading and uploading, sure — sharing, moving, or trashing a file asks first. Calendar: a bit more freedom to create, change, and delete events unless you flip on manual approval yourself. Want to see or cut a connection? Customize > Connectors inside Claude, or myaccount.google.com/connections.
Learn more: Use Google Workspace connectorsCan I run Claude in Chrome while I'm logged into my bank or QuickBooks?
This is the one everyone asks about, so let's just be blunt: no. Claude in Chrome works by literally screenshotting the page to understand it — so if your bank, QuickBooks, or a health portal is open while it's running, Claude can technically see whatever's on screen. Same as someone reading over your shoulder. Banking, investment, and crypto sites get blocked by default or Claude stops and asks first — and it's never, ever allowed to trade stock or type sensitive numbers into a site, no matter what you've approved. Solution: a separate Chrome profile, no bank or accounting logins, and keep Claude over there instead. Same goes for QuickBooks Online — not technically a "bank," but it's your real numbers, so treat it the same. In healthcare? Claude in Chrome currently isn't offered to HIPAA-covered organizations at all.
Learn more: Use Claude in Chrome safelyShould I use ChatGPT to build my prompts for Claude, since it knows me better?
You really don't need to. Claude can write and sharpen its own prompts, right there in the same chat — that's literally what "Meet your Claude tutor" and "Your business brain" already do for you in the Skills Library. Already dumped a ton of info into ChatGPT and don't want to retype it all? Fine, ask ChatGPT to summarize what it knows about you in one paragraph and paste that in. But bouncing between two tools every single time just adds a step without adding much upside.
Where do I go for photo or image generation, since Claude isn't as advanced there yet?
True today: Claude can't generate images on its own — it can analyze photos, whip up simple graphics like diagrams, and write genuinely great image prompts. For real estate content, most agents lean on Canva (Magic Media, since you're probably already living in Canva anyway), ChatGPT or Google Gemini for quick photorealistic shots, or a dedicated virtual-staging tool. The real move: let Claude write the detailed image prompt, then hand that prompt to whichever image tool you're using. It's still doing the thinking — you're just handing off the last step to a specialist.
Can I just paste what Claude writes straight into an MLS listing?
Give it a compliance read first, always. Claude doesn't know Fair Housing law, and language that sounds totally harmless — "family-friendly neighborhood," "perfect for young professionals" — can accidentally cross into steering, which is illegal no matter how innocent you meant it. Treat every AI-drafted listing description, neighborhood blurb, or CMA talking point like a rough draft, not a final answer: read it the way your broker would before it goes anywhere public. Some MLS boards have their own rules about disclosing AI-assisted content too, so a quick check with yours is worth it. Quick disclaimer: this isn't legal advice — when it's unclear, ask your broker or compliance officer.
What's a sane way to set all this up when I'm just getting started?
Manual mode for anything touching money, contracts, or client info. Leave data training off until you decide on purpose to flip it on. Grab a separate Chrome profile — no bank, no QuickBooks, no medical logins — for anything you do with Claude in Chrome. Connect Gmail and Drive read-only first, and leave sending, sharing, and deleting on "ask me" until you trust the pattern. Check your connections every few months and cut loose anything you're not using. And whenever you're not sure? Allow once.