A practical guide to AI agent PII handling: what data to minimize, what to mask, where to store it, and how to keep production workflows useful without turning logs, prompts, and tools into a privacy liability.