Author here (HoverBot team). How we keep PII out of LLMs in our chatbots: detect fast -> replace with typed placeholders -> call the model -> unmask on our server. We also cover region pinning and vendor privacy controls. Keen to hear trade-offs, failure modes, and better designs.