Hey, I think you should consider to have a Redact features to remove all personal information as [REDACTED-XXX] before send it to inference endpoint. You can make it like a choice button.

For starting, you can redact: PARTIES_NAME, BANK_ACCOUNT, MONETARY_AMMOUNT, EMAIL_ADDRESS, PHONE_FAX_NUMBERS, LETTER_NUMBERS

It will be a killer feature, since there's no local applications out there does this. There's only online services provided the feature like Opaque.co