| Before | After | ||
|---|---|---|---|
| 0 | Privacy Policy Last updated: December 23, 2025 Please visit our Privacy Center for a summary of the changes we've made. | 0 | Privacy Policy Last updated: July 13, 2026 Please visit our Privacy Center for a summary of the changes we've made. |
| 1 | Harvey AI Corporation (" Harvey ", " we ", " us ", " our ") respects your right to privacy, and we are dedicated to securing and protecting any information we have about you. | 1 | Harvey AI Corporation and our affiliates (" Harvey ", " we ", " us ", " our ") respect your right to privacy, and we are dedicated to securing and protecting any information we have about you. |
| 9 | Harvey's Services are offered to businesses, companies and/or other entities (our " Customers ") for professional use. | 9 | Harvey's Services are offered to businesses, companies and/or other entities, and/or individual professionals (our " Customers ") for professional use. |
| 10 | We enter into customer agreements (for example, our platform agreement, pilot agreement, evaluation agreement, terms of service, data processing agreement etc.,) with our Customers. | 10 | We enter into customer agreements (for example, our platform agreement, pilot agreement, evaluation agreement, terms of service, data processing addendum etc.,) with our Customers. |
| 13 | We process this data on behalf of Customers and we call it (" Customer Data" and "Content "). | 13 | We process that data on behalf of Customers and we call it (" Customer Data" and "Content "). |
| 16 | This Privacy Policy governs where Harvey is the data controller responsible for the processing of the Personal Data. | 16 | This Privacy Policy applies where Harvey is the data controller responsible for the processing of the Personal Data. |
| 20 | The Personal Data we collect includes: a) Account Information: When you or your employer creates an account with us and throughout the time you or your employer uses the Services, we collect certain information associated with your account, including your name, email address, and information about your profession and professional experience, language preferences, account credentials, payment information, and your transaction history with us (collectively, " Account Information "). b) Communication Information: If you communicate with us, (for example when you contact us about our Services, when you complete a survey, when you interact with our Websites, or when you request support) we collect your name, email address, information about your profession, customer survey responses, the way you interact with our communication and Services, and the contents of any messages you send (collectively " Communication Information "). c) Social Media Information: We have pages on social media services like X, YouTube, and LinkedIn. When you interact with our pages or our employees or representatives via social media services, we collect Personal Data that you choose to provide to us, such as your contact details and the contents of your messages, posts, or profiles. | 20 | The Personal Data we collect includes: a) Account Information: When you or your employer creates an account with us and throughout the time you or your employer uses the Services, we collect certain information associated with your account, including your name, email address, and information about your profession and professional experience, language preferences, account credentials, payment information, and your transaction history with us (collectively, " Account Information "). b) Communication Information: If you communicate with us, (for example when you contact us about our Services, when you complete a survey, when you participate in an event we may host or sponsor, when you interact with our Websites, or when you request support) we collect your name, email address, information about your profession, customer survey responses, the way you interact with our communication and Services, and the contents of any messages you send us (collectively " Communication Information "). c) Social Media Information: We have pages on social media services like X, YouTube, and LinkedIn. When you interact with our pages or our employees or representatives via social media services, we collect Personal Data that you choose to provide to us, such as your contact details and the contents of your messages to us, posts, or profiles. |
| 21 | In addition, third parties may provide us with aggregate information and analytics about our social media activity (collectively, " Social Media Information "). | 21 | In addition, third parties may provide us with aggregate information and analytics about social media activity and other information you choose to make public on the social media platform (collectively, " Social Media Information "). |
| 25 | This includes your email address, account identifiers, data about how often you visit the Websites, how you interact with the Services, the amount of time spent engaging with the Services, the volume of queries you submit, the type of queries you submit, the features interacted with, and how those features performed during your interactions (collectively " Usage Data "). c) Cookies and Similar Technologies: We use cookies, scripts, or similar technologies (collectively " Cookies and Similar Technologies ") to manage the Services and to collect information about you and your use of the Services and interactions with our Websites. | 25 | This includes your email address, account identifiers, data about how often you visit the Websites, how you interact with the Services, the amount of time spent engaging with the Services, the volume of queries you submit, the type of queries you submit, the features interacted with, and how those features performed during your interactions (collectively " Usage Data "). c) Cookies and Similar Technologies: We use cookies, pixels, scripts, or similar technologies (collectively " Cookies and Similar Technologies ") to manage the Services and to collect information about you and your use of the Services and interactions with our Websites. |
| 27 | These technologies help us to recognize you, customize or personalize your experience, market additional products or services to you, understand your preferences, improve your Websites experience, and analyse the use of our Services to make them safer and more useful to you. | 27 | These technologies help us to recognize you, customize or personalize your experience, market additional products or services to you, understand your preferences, improve your Websites experience, and analyse the use of our Services to make them safer and more useful. |
| 28 | For more details about how we use these Cookies and Similar Technologies, your opt-out controls, and other options please visit our Cookie Policy available at www.harvey.ai/legal/cookie-policy. d) Device Information: We also collect certain device and connection-specific information when you install, access, or use our Services and interact with our Websites. | 28 | For more details about how we use these Cookies and Similar Technologies, your opt-out controls, and other options please visit our Cookie Policy. d) Device Information: We also collect certain device and connection-specific information when you install, access, or use our Services and interact with our Websites. |
| 31 | Information we collect from third parties We also receive certain information about you from our trusted partners, such as: a) security partners who may provide us with information such as compromised credentials and personal details, to protect against fraud, abuse, and other security threats; b) marketing vendors who provide us with information about potential customers of our services, such as contact details, like name, email address, physical address, and phone number, and information about professional affiliations and employment; c) advertising vendors, including social media services who may provide us with information such as interactions with our marketing emails, social media posts, and other advertisements; and d) market research firms, survey companies, and event organisers (for example, trade shows, professional events, conferences, and seminars we attend) that may provide us with information about you, including contact details (such as your name, email address, physical address, and phone number), information about your professional affiliations and employment, and information relating to your use of our Services and Websites, your business, and your use of artificial intelligence (collectively " Market Research Information "). | 31 | Information we collect from third parties We also receive certain information about you from our trusted partners, such as: a) security partners who may provide us with information such as compromised credentials and personal details, to protect against fraud, abuse, and other security threats; b) marketing vendors who provide us with information about potential customers of our services, such as contact details, like name, email address, physical address, and phone number, and information about professional affiliations and employment; c) advertising vendors, including social media services who may provide us with information such as interactions with our marketing emails, social media posts, and other advertisements; and d) market research firms, survey companies, and event organisers (for example, trade shows, professional events, conferences, and seminars we attend) that may provide us with information about you, including contact details (such as your name, email address, physical address, and phone number), information about your professional affiliations and employment, and information relating to your use of our Services and Websites, your business, and your use of artificial intelligence. |
| 33 | Information that is publicly available We collect publicly available information about customers and prospects to help offer and provide our Services. | 33 | Information that is publicly available We collect publicly available information, including information made publicly available on social media or professional websites, about customers and prospects to help offer and provide our Services. |
| 35 | For more information on the sources of information used to train, maintain, and develop our AI platform and the steps we take to minimise the privacy impact on individuals, please see here for more details. 3. | 35 | For more information on the sources of information used to train, maintain, and develop our AI platform and the steps we take to protect individuals' privacy, please see our Privacy Center. 3. |
| 36 | How We Use Personal Data We may use Personal Data covered by this Privacy Policy for the following purposes: to provide and maintain our Services; to bill for our Services; to develop, improve, and update our Services and new functionality; to develop, improve, and update the way in which we provide support and carry out our other business practices; to carry out and conduct research or surveys; to investigate the effectiveness of our Services, to understand how our Services are used, and to evaluate user needs and preferences; to personalise your use of our Services, applications, or platforms; to provide customer support and resolve bugs, issues, or customer queries; to communicate with you, including to send you information or marketing about our services and events; to assess your eligibility for, and offer you or promote our Services. | 36 | How We Use Personal Data We may use Personal Data covered by this Privacy Policy for the following purposes: to provide and maintain our Services; to bill for our Services; to obtain and pay for services when you are employed by one of our service providers or partners; to develop, improve, and update our Services and new functionality; to develop, improve, and update the way in which we provide support and carry out our other business practices; to carry out and conduct research or surveys; to investigate the effectiveness of our Services, to understand how our Services are used, and to evaluate user needs and preferences; to personalise your use of our Services, applications, or platforms; to provide customer support and resolve bugs, issues, or customer queries; to communicate with you, including to send you information or marketing about our Services and events (To opt-out or object to receiving marketing communications from Harvey AI, please email privacy@harvey.ai); to assess your eligibility for, and offer you or promote our Services. |
| 37 | Where allowed by law (including, where required, with your opt-in consent), we use and share your Personal Data with others so that we may market our Services to you, including through interest-based advertising; to prevent fraud, criminal activity, or misuses of our Services, and to protect the security of our systems and Services; and to comply with legal obligations and to protect the rights, privacy, safety, or property of our users, us, our affiliates, or any third party. | 37 | Where allowed by law (including, where required, with your opt-in consent), we use and share your Personal Data with others so that we may market our Services to you, including through interest-based advertising (To opt-out or withdraw your consent to having your data shared for interest-based advertising, please visit the Your Privacy Choices page.); to prevent fraud, criminal activity, or misuses of our Services, and to protect the security of our systems and Services; and to comply with legal obligations and to protect the rights, privacy, safety, or property of our users, us, our affiliates, or any third party. |
| 38 | We may aggregate or de-identify Personal Data so that You can no longer be identified and use the aggregated or de-identified data for the following purposes: to investigate and study the effectiveness of our Services; to update and improve our Services; to develop, improve, and update the way in which we provide support and carry out our other business practices; to conduct research and surveys; and to share or publish aggregated information about usage of our services, for example on our blog or on social media (e.g. LinkedIn). | 38 | We may aggregate or de-identify Personal Data so that You can no longer be identified and use the aggregated or de-identified data for the following purposes: to investigate and study the effectiveness of our Services; to update and improve our Services; to develop, improve, and update the way in which we provide support and carry out our other business practices; to conduct research and surveys; and to share or publish aggregated information about usage of our Services, for example on our blog or on social media (e.g. LinkedIn). |
| 40 | Details of the purposes for which we process Personal Data as a controller, and the legal bases we rely on for such processing in the European Economic Area and the United Kingdom, are set out in the 'Jurisdiction Specific Provision' under the legal basis table. | 40 | Details of the purposes for which we process Personal Data as a controller, and the legal bases we rely on for such processing in the European Economic Area and the United Kingdom, are set out in the legal basis table in the 'Jurisdiction Specific Provisions' of this Privacy Policy. |
| 42 | Who We Share Your Personal Data With We share your personal data with the following categories of recipients: Our Affiliates: We will share Personal Data that we collect, such as Account Information with any corporate affiliates. | 42 | Who We Share Your Personal Data With We share your personal data with the following categories of recipients: a) Our Affiliates: We will share Personal Data that we collect, such as Account Information with any corporate affiliates. |
| 43 | The information shared may be used for the purposes described in this Privacy Policy and generally to operate our business, including, processing for fraud prevention, payment processing, customer support, business development, user account administration, and IT, technical, and engineering support. | 43 | The information shared may be used for the purposes described in this Privacy Policy and generally to operate our business, including, processing for fraud prevention, payment processing, customer support, business development, user account administration, and IT, technical, and engineering support. b) Linked Third-Party Websites or Plug-Ins when you use third party applications, such as Microsoft and choose to connect your Harvey account with such external third-party applications, we may share information about you with the providers of those services or products. |
| 44 | Trusted Partners and Service Providers: We may engage third-party companies or individuals as service providers to help us operate and support our business. | 44 | Please be aware that when you use third-party sites or services, their own terms and privacy policies will govern your use of the third parties' sites or services. c) Vendors and Service Providers. |
| 45 | These third parties may support Harvey in respect of a variety of business purposes including website and data hosting, research, auditing, marketing, customer support, and data processing. | 45 | To assist us with our business operations and to perform certain services and functions including providers of hosting services, email services, sales support, customer support, marketing services, research, auditing, authentication, financial services, communication services, content delivery services, data warehouse services, and other information technology services providers. |
| 46 | These third parties have limited access to your information, may use your information only to perform agreed tasks, and are prohibited from disclosing or using your information for other purposes. | 46 | For more details please see Harvey's Service Provider list available in our Trust Center. d) Business Reorganisation: If we choose to reorganize our business (such as via a sale, merger, liquidation, receivership, or transfer of all or substantially all of Harvey's assets), your Personal Data may be disclosed in the diligence process with counterparties and others assisting with the transaction and transferred to a successor or affiliate as part of that transaction. |
| 47 | The types of third-party service providers that we work with include: a) Linked Third-Party Websites or Plug-Ins when you use third party applications, such as Microsoft and choose to connect your Harvey account with such external third-party applications. | 47 | If Harvey intends to transfer information about you for such purposes, we will notify you. e) Professional Advisors, Industry Partners, Authorities, Regulators, and other Entities: We may share your Personal Data with our advisors, accountants, and consultants and regulators, tax authorities, law enforcement, government agencies, civil litigants, and other entities as reasonably necessary to: comply with applicable law or regulations, court orders, subpoenas, legal process, or government requests; detect, investigate, prevent, or address actual or suspected fraud and other illegal activity, violations of Harvey's Terms, or security and technical issues; or protect the rights, property and safety of our Customers, Harvey, or others, including to prevent harm or loss. f) Our Customers: When you use the Service, we may provide you or your employer with information regarding your account and your use of the Services, including as appropriate your Account Information, Usage Data, and Log Data. g) Advertising Providers: Subject to applicable law, including any consent requirements, we may share your Personal Data with third party advertising and marketing vendors to assist us in contacting and advertising our Services to you, including through interest-based advertising, and to track the efficacy of such ads. |
| 48 | If you choose to connect your account to a third-party application, the providers of those services or products may receive information about you that Harvey, you, or others share with them. | 48 | For a list of advertising providers we work with please see our Privacy Center. |
| 49 | Please be aware that when you use third-party sites or services, their own terms and privacy policies will govern your use of those sites or services. b) Vendors and Service Providers. | — | Removed |
| 50 | To assist us with our business operations and to perform certain services and functions including providers of hosting services, email providers, sales support, customer support, authentication providers, financial services providers, communication providers, content delivery services, data warehouse services, and other information technology services providers. | — | Removed |
| 51 | For more details please see Harvey's Service Provider page here. c) Business Reorganisation: In some cases, we may choose to reorganize our business (such as via a sale, merger, liquidation, receivership, or transfer of all or substantially all of Harvey's assets). | — | Removed |
| 52 | Your Personal Data may be disclosed in the diligence process with counterparties and others assisting with the transaction and transferred to a successor or affiliate as part of that transaction. | — | Removed |
| 53 | If Harvey intends to transfer information about you, we will notify you. d) Professional Advisors, Industry Partners, Authorities, Regulators, and other Entities: We may share your Personal Data with our advisors, accountants, consultants, regulators and tax authorities, law enforcement, government agencies, civil litigants, and other entities as reasonably necessary to: comply with applicable law or regulations, court orders, subpoenas, legal process, or government requests; detect, investigate, prevent, or address actual or suspected fraud, violations of Harvey's Terms, and other illegal activity or security and technical issues; or protect the rights, property and safety of our Customers, Harvey, or others, including to prevent harm or loss. e) Our Customers: When you use the Service, we may provide you or Your employer with information regarding your account and your use of the Services, including as appropriate your Account Information and Log Data. | — | Removed |
| 61 | When you access our Websites, or use our Services, your Personal Data may be transferred to our servers located in the US, or to other countries outside, including countries outside of the European Economic Area (" EEA "), Switzerland, and the United Kingdom (" UK "). | 56 | When you access our Websites, or use our Services, your Personal Data may be transferred to our servers located in the US or to other countries, including countries outside of the European Economic Area (" EEA "), Switzerland, and the United Kingdom (" UK "). |
| 63 | Where Personal Data described in the 'Personal Data We Collect and Process' section is transferred outside of the country of origin and, where required by law (including in the EEA, Switzerland, or the UK), we ensure it benefits from an adequate level of data protection by relying on: Adequacy Decisions: These are decisions from an official authority, such as the European Commission under Article 45 GDPR (or equivalent decisions under other laws) where they recognise that a country outside of the country of origin (e.g., the EEA) offers an adequate level of data protection. | 58 | Where Personal Data described in the 'Personal Data We Collect and Process' section is transferred outside of the country of origin and, where required by law (including in the EEA, Switzerland, or the UK), we ensure it benefits from an adequate level of data protection by relying on: Adequacy Decisions: These are decisions from an official authority, such as the European Commission under Article 45 GDPR (or equivalent decisions under other laws) that recognise that a country outside of the country of origin (e.g., the EEA) offers an adequate level of data protection. |
| 65 | Standard Contractual Clauses: For jurisdictions which are not deemed adequate, we rely on other lawful transfer mechanisms ('appropriate safeguards') like the Standard Contractual Clauses. | 60 | Standard Contractual Clauses: For jurisdictions which are not deemed adequate, we rely on other lawful transfer mechanisms ('appropriate safeguards') like standard contractual clauses. |
| 83 | We take responsibility for the processing of personal information we receive and subsequently transfer to a third party. | 78 | We take responsibility for the processing of Personal Data we receive and subsequently transfer to a third party. |
| 84 | In the case of an onward transfer, Harvey remains liable if such a third-party processes personal information in a way that is inconsistent with the Data Privacy Framework Principles, unless we can demonstrate that we were not responsible for the event that gave rise to the damage. | 79 | In the case of an onward transfer, Harvey remains liable if such a third-party processes Personal Data in a way that is inconsistent with the Data Privacy Framework Principles, unless we can demonstrate that we were not responsible for the event that gave rise to the damage. |
| 88 | How long we retain Personal Data will depend on a number of factors including whether we need to retain your data to: to comply with the terms of your or your employer's Customer Agreement; to comply with or demonstrate compliance with our legal obligations, to resolve disputes, or to enforce our agreements; and in relation to Account Information, for our tax, accounting, and audit requirements. | 83 | How long we retain Personal Data will depend on a number of factors including whether we need to retain your data: to comply with the terms of your or your employer's Customer Agreement; to comply with or demonstrate compliance with our legal obligations, to resolve disputes, or to enforce our agreements; and in relation to Account Information, for our tax, accounting, and audit requirements. |
| 97 | If we rely on our (or a third party's) legitimate interests, these interests will include: operating, providing, and improving our business, including our, support practices, online platform and Services; improving our products and Services; improving or developing marketing activities and promoting our products and services; personalising our services to you; detecting or preventing illegal activities (for example, fraud), as well as, enforcing violations of our Customer Agreements or terms of service (collectively " Terms ") including to prevent misuse of our Services, and violations of our trust and safety protocols; and managing the security of our IT infrastructure, and the safety and security of our employees, customers, vendors, and visitors. | 92 | If we rely on our (or a third party's) legitimate interests, these interests will include: operating, providing, and improving our business, including our, support practices, online platform and Services; improving our products and Services; improving or developing marketing activities and promoting our products and Services; personalising our Services to you; detecting or preventing illegal activities (for example, fraud), as well as, enforcing violations of our Customer Agreements or terms of service (collectively " Terms ") including to prevent misuse of our Services, and violations of our trust and safety protocols; and managing the security of our IT infrastructure, and the safety and security of our employees, customers, vendors, and visitors. |
| 101 | Account Information Communication Information Log Data Usage Data Device Information Information Collected * From Third Parties Cookies and Similar Technologies Publicly Available Information To send communications related to our Services We may send you communications about our services, including to verify your email address, welcome you to the services, confirm a purchase/transaction, to notify you about a new service offering, changes or updates to the services, or updates to this Privacy Policy, our Terms or other policies, or to provide other notices in accordance with our Terms. | 96 | Where appropriate we may also rely on our legitimate interests in providing and administering our Services pursuant to our agreements with the Customer with which you are associated, and those of our Customer, in receiving those Services. |
| 97 | Account Information Communication Information Log Data Usage Data Device Information Information Collected From Third Parties Cookies and Similar Technologies Publicly Available Information To send communications related to our Services We may send you communications about our Services, including to verify your email address, welcome you to the Services, confirm a purchase/transaction, to notify you about a new service offering, changes or updates to the Services, or updates to this Privacy Policy, our Terms or other policies, or to provide other notices in accordance with our Terms. | ||
| 99 | Where appropriate we may also rely on our legitimate interest in providing, supporting, and administering our Services pursuant to our agreements with the Customer with which you are associated and those of our Customer, in receiving those Services and Support. | ||
| 104 | Account Information Communication Information Usage Data Log Data Device Information Legal obligation Why and How We Process Your Personal Data Information Categories Processed To comply with our legal obligations For example, to access, preserve or disclose certain information if there is a valid legal request from a regulator, law enforcement or others or to implement appropriate security measures. | 101 | Where appropriate we may also rely on our legitimate interests in providing, supporting, and administering our Services pursuant to our agreements with the Customer with which you are associated, and those of our Customer, in receiving those Services and support. |
| 102 | Account Information Communication Information Usage Data Log Data Device Information Legal Obligation Why and How We Process Your Personal Data Information Categories Processed To comply with our legal obligations For example, to access, preserve or disclose certain information if there is a valid legal request from a regulator, law enforcement or others or to implement appropriate security measures. | ||
| 107 | Depending on the circumstances, it could include the following: Account Information Communication Information Log Data Usage Data Device Information Information Collected From Third Parties Cookies and Similar Technologies Publicly Available Information Consent Why and How We Process Your Personal Data Information Categories Processed Advertising We may use your Personal Data to assess your eligibility for and offer you our services. | 105 | Depending on the circumstances, it could include the following: Account Information Communication Information Log Data Usage Data Device Information Information Collected From Third Parties Cookies and Similar Technologies Publicly Available Information Consent Why and How We Process Your Personal Data Information Categories Processed Advertising We may use your Personal Data to assess your eligibility for and offer you our Services. |
| 111 | Social Media Information Cookies and Similar Technologies Device Information Information Collected from Third Parties Legitimate Interests Why and How We Process Your Personal Data Information Categories Processed To improve and develop the Services We use certain information to improve our services, including to ensure the services are functioning correctly, and to discover ways to innovate new features and improve existing ones. | 109 | When permissible, we may also direct advertising to you based on our legitimate interest in advertising and promoting our Services. |
| 110 | Social Media Information Cookies and Similar Technologies Device Information Information Collected from Third Parties Communication Information Legitimate Interests Why and How We Process Your Personal Data Information Categories Processed To improve and develop the Services We use certain information to improve our Services, including to ensure the Services are functioning correctly, and to discover ways to innovate new features and improve existing ones. | ||
| 113 | Harvey's legitimate interest It is in our legitimate interest to understand how our services are being used, and to explore and unlock ways to develop and grow our business. | 112 | Harvey's legitimate interest It is in our legitimate interest to understand how our Services are being used, and to explore and unlock ways to develop and grow our business. |
| 114 | It is in our legitimate interests, and those of our customers, to increase interest in our services, and obtain insights into usage patterns of our services. | 113 | It is in our legitimate interests, and those of our Customers, to increase interest in our Services, and obtain insights into usage patterns of our Services. |
| 115 | Account Information Communication Information Log Data Usage Data Device Information Information Collected From Third Parties Cookies and Similar Technologies Publicly Available Information To keep our Services safe and secure We process your information and, in some cases, apply automated processing and manual (that is, human) review to maintain the security and integrity of our Services. | 114 | Account Information Communication Information Log Data Usage Data Device Information *Information Collected From Third Parties Cookies and Similar Technologies Publicly Available Information To keep our Services safe and secure We process your information and, in some cases, apply automated processing and manual (that is, human) review to maintain the security and integrity of our Services. |
| 116 | This involves taking steps to detect, investigate and otherwise protect ourselves against abuse, harassment, breaches of our systems, intellectual property infringement, crime, illegal activity, suspected fraud, harm, suspected violations of our Terms of Use or other policies and safety and security risks of all kinds. | 115 | This involves taking steps to detect, investigate and otherwise protect ourselves and our Customers against abuse, harassment, breaches of our systems, intellectual property infringement, crime, illegal activity, suspected fraud, harm, suspected violations of our Terms of Use or other policies and safety and security risks of all kinds. |
| 117 | Harvey's legitimate interest It is in our legitimate interests, and those of our customers, to ensure the security of our services, and to combat harmful, accidental misuse, or inappropriate conduct. | 116 | Harvey's legitimate interest It is in our legitimate interests, and those of our Customers, to ensure the security of our Services, and to combat harmful, accidental misuse, or inappropriate conduct. |
| 118 | It is in our legitimate interests, those of our customers and the general public to enforce our Terms and associated policies, including to prevent or address fraud, and illegal activities. | 117 | It is in our legitimate interests, those of our Customers and the general public to enforce our Terms and associated policies, including to prevent or address fraud, and illegal activities. |
| 119 | Account Information Communication Information Publicly Available Information Log Data Usage Data Device Information Information Collected From Third Parties To personalise our services We use certain information to personalise our services to you including to provide you with products and features relevant to your profession. | 118 | Account Information Communication Information Publicly Available Information Log Data Usage Data Device Information *Information Collected From Third Parties Account Information Communication Information Log Data Usage Data Publicly Available Information To personalise our Services We use certain information to personalise our Services to you including to provide you with products and features relevant to your profession. |
| 120 | Harvey's legitimate interest It is in our legitimate interests, and those of our customers, to increase interest in our services, and provide material and products relevant to Your profession. | 119 | Harvey's legitimate interest It is in our legitimate interests, and those of our Customers, to increase interest in our Services, and provide material and products relevant to Your profession. |
| 129 | Account Information Information Collected From Third Parties Communication Information Usage Data To share information with our service providers and business partners We share certain information with our service providers and business partners, as detailed in Section 4 above. | 128 | Account Information Information Collected From Third * Parties Communication Information Usage Data Log Data Publicly Available Information Device Information Cookies and Similar Technologies Social Media Information To share information with our service providers and business partners We share certain information with our service providers and business partners, as detailed in Section 4 above. |
| 130 | Harvey's legitimate interest It is in our legitimate interests, and those of our customers, to engage service providers and partners to assist in the provision of the Services and operation of our business. | 129 | Harvey's legitimate interest It is in our legitimate interests, and those of our Customers, to engage service providers and partners to assist in the provision of the Services and operation of our business. |
| 131 | Account Information Social Media Information Information Collected From Third Parties Publicly Available Information Communication Information Usage Data To send you email and telephone marketing At certain times, we may contact you with information or marketing material about our services and promotional business/ networking events. | 130 | Account Information Social Media Information Information Collected From Third Parties Publicly Available Information Communication Information Usage Data Log Data Device Information Cookies and Similar Technologies To send you email and telephone marketing At certain times, we may contact you with information or marketing material about our Services and promotional business/ networking events. |
| 132 | Where permitted by law, this activity may be based on our legitimate interest. | 131 | Where permitted by law, this activity may be based on our legitimate interest or on your consent as appropriate under applicable law. |
| 133 | Where required by law it will be based on your consent. | 132 | You may object to such processing or revoke your consent as described in Section 10. |
| 135 | Account Information Social Media Information Information Collected From Third Parties Publicly Available Information Usage Data Device Information Cookies and Similar Technologies United States If you are a consumer located in the United States (" US "), we process your Personal Data in accordance with US privacy laws, including the California Consumer Privacy Act of 2018 as amended by the California Privacy Rights Act of 2020 (" CCPA "). | 134 | Account Information Social Media Information Information Collected From Third Parties Publicly Available Information Usage Data Device Information Cookies and Similar Technologies Communication Information To bill for our Services If you are employed by one of our Customers we may process your Personal Data to send you bills or communicate with you about amounts owed by your employer. |
| 136 | Additional information about (a) the categories of Personal Information we collect; (b) the source of the Personal Information; (c) the purposes of collection; and (d) how we disclose Personal Information is as follows: Category of Personal Information Sources of Personal Information Purposes of Collection of Personal Information Disclosure of Personal Information for a Business Purpose within the Preceding 12 months Social Media Information We may collect Social Information from you when you interact with our Social Media Pages. | 135 | Harvey's legitimate interest It is in our legitimate interest to obtain payment for the Services we provide. |
| 137 | We may use Social Information to perform analytics and to communicate with you. | 136 | Account Information Communication Information To obtain and pay for services from our service providers and partners. |
| 138 | We may disclose Social Information to our Affiliates and service providers. | 137 | If you are employed by an organization that provides us with services we may use your Personal Data to communicate with you and direct payment related to those services. |
| 139 | Communication Information (e.g., information we collect when you communicate with us or contact us) We collect Communication Information directly from you. | 138 | Harvey's legitimate interest It is in our legitimate interest to obtain and pay for services to support our Services and business activities. |
| 140 | We use Communication Information for providing our Services and responding to you. | 139 | Communication Information United States If you are a consumer located in the United States ("US"), we process your Personal Data in accordance with US privacy laws, including the California Consumer Privacy Act of 2018 as amended by the California Privacy Rights Act of 2020 ("CCPA"). |
| 141 | We disclose Communication Information to our Affiliates and service providers. | 140 | As used in this Privacy Policy, the term Personal Data includes "Personal Information" as defined under the CCPA. |
| 142 | Technical Information (for example, Log Data, Usage Data, Cookies and Similar Technologies, Device Information) We collect Technical Information from you including through your interaction with Harvey. | 141 | Personal Data We Collect and Disclose We collect and have collected in the past 12 months, the following categories of Personal Data as further described and from the sources identified in Section 2 of this Privacy Policy. |
| 143 | We use Technical Information for analytics and, in some cases, to improve our services and for the prevention of fraud and malicious activity. | 142 | We collect these categories of Personal Data for the business or commercial purposes described in Section 3 of this Privacy Policy and disclose them as described in Section 4 of this Privacy Policy. |
| 144 | We disclose Technical Information to our Affiliates and service providers Support Information We may collect Support Information from you in providing your support in your use of the Services. | 143 | Identifiers such as name, signature, email address, postal address, internet protocol address, and account name, Professional or employment related information, such as current employer, job title, and employment history, Financial information such as account numbers and other payment information, Commercial Information such as your history of subscribing to the Services, Internet and other electronic network activity information, such as your interactions with our Websites and Services, Social Media services and advertisements, Education information, Audio and visual information, and Inferences drawn from the above information. |
| 145 | We use support information for providing support, maintaining the services, and in responding to you. | 144 | We do not use or disclose Sensitive Personal Information (as defined under the CCPA) for purposes other than those specified in 11 CCR § 7027(m). |
| 146 | We may disclose Support Information to our Affiliates and service providers. | 145 | Personal Data We Share Harvey does not sell or share Personal Data with third parties in exchange for payment. |
| 147 | Market Research Information We may collect information about you from market research firms and similar data providers. | 146 | However, in the last 12 months, to the extent permitted by applicable law we have provided Personal Data of individuals who visit our Websites or otherwise provide their Personal Data for marketing purposes with third party partners, such as advertising partners, analytics providers, and social networks, who assist us in advertising our products and Services to you. |
| 148 | We may use Market Research Information to better understand your use and interest in our Services to develop and improve the Services and to market the Services to you. | — | Removed |
| 149 | We may disclose Market Research Information to our Affiliates and service providers. | — | Removed |
| 150 | Harvey does not sell or share personal data with third parties in exchange for payment. | — | Removed |
| 151 | However, to the extent permitted by applicable law we may provide Personal Data of individuals who visit our Websites or otherwise provide their Personal Data for marketing purposes to third party partners, such as advertising partners, analytics providers, and social networks, who assist us in advertising our products and services to you. | — | Removed |
| 153 | To our knowledge, Harvey does not sell personal information of minors under 18 years of age. | 148 | Personal Data we share for these purposes may include: email address, Device Information, and information about your interactions with our Websites and advertisements. |
| 154 | As a U.S. consumer and subject to certain limitations under U.S. privacy laws, you may have choices regarding our use and disclosure of your Personal Data. | 149 | For more information on the parties with which we share Personal Data please see our Privacy Center. |
| 155 | In addition to the rights outlined in section 10 below, other rights include: Exercising the right to know: You have a right to request additional information including the categories and purposes for which your Personal Data is collected and the third parties with whom your Personal Data is disclosed to. | 150 | To our knowledge, we do not sell or share Personal Data of minors under 18 years of age. |
| 156 | Exercising the right to opt-out from a sale or sharing: We do not sell or share your Personal Data in exchange for payment. | 151 | Consumer Rights As a U.S. consumer and subject to certain limitations under U.S. privacy laws, you may have choices regarding our use and disclosure of your Personal Data. |
| 157 | As noted above, we may share the personal information of certain individuals for targeted advertising. | 152 | Those rights may include the rights described in Section 10 of this Privacy Policy and the additional rights listed below. |
| 158 | Where legally required, we provide you with the option to opt out of targeted advertising on our site under "Your Privacy Choices". | 153 | For information regarding which of these rights may be applicable in your state, please visit our Privacy Center. |
| 154 | The right to know/confirmation of processing: You may have a right to request additional information including the categories and purposes for which your Personal Data is collected and the third parties to which your Personal Data is disclosed. | ||
| 155 | The right to opt-out from targeted advertising, and the Sale or Sharing of your Personal Data: We do not sell or share your Personal Data in exchange for payment. | ||
| 156 | As noted above, we may share the Personal Data of certain individuals for targeted advertising. | ||
| 157 | Where legally required, we provide you with the option to opt out of targeted advertising on our site under " Your Privacy Choices ". | ||
| 158 | Where we detect the Global Privacy Control signal, we will also treat that as a request to opt out from targeted advertising for data associated with the specific browser and device that transmits the signal. | ||
| 159 | The right to opt-out from certain profiling: If we process your Personal Data in furtherance of decisions that produce legal or similarly significant effects, we will notify you and you may have the right to opt-out from such processing. | ||
| 160 | The right to non-discrimination: If you exercise any of your other rights under U.S. privacy laws, the law may also grant you the right not to be discriminated against for having done so. | ||
| 161 | The right to appeal: If we deny a request to exercise your rights, you may have the right to appeal that decision. | ||
| 160 | Return to top Canada Notwithstanding anything to the contrary in this Privacy Policy, in Canada, we will only collect, use and disclose information about you in accordance with Canadian law. | 163 | Canada Notwithstanding anything to the contrary in this Privacy Policy, in Canada, we will only collect, use and disclose information about you in accordance with Canadian law. |
| 172 | You can exercise your rights by contacting us using the details listed in Section 12 below. 9. | 175 | You can exercise your rights by contacting us using the details listed in Section 12 below. |
| 176 | Australia For purposes of this Privacy Policy, "Personal Data" includes "personal information" as defined under applicable privacy laws in Australia, including the Privacy Act 1988 (Cth) and the Australian Privacy Principles (for the purposes of this section "Privacy Act"). | ||
| 177 | If your Personal Data is subject to the Privacy Act, you may seek access and correction of the Personal Data we hold about you as described in Section 10 of this Privacy Policy. | ||
| 178 | If you believe that we have collected, disclosed, or otherwise used your Personal Data in a manner that breaches the Privacy Act you may submit a complaint by emailing us at privacy@harvey.ai. | ||
| 179 | We will promptly investigate your complaint and respond to you in writing, typically within thirty days. | ||
| 180 | If you are not satisfied with our response, you may consider contacting the Office of the Australian Information Commissioner. | ||
| 181 | Personal Data we collect about you may be disclosed to the overseas recipients described in Section 4 of this Privacy Policy. | ||
| 182 | In most cases, those recipients will be located in the United States, the United Kingdom, the European Union, or other locations where our affiliates maintain operations. 9. | ||
| 177 | Subject to certain exceptions and exemptions provided by law and where applicable, you may: Access, correct, update, or request deletion of your Personal Data. | 187 | Subject to certain exceptions and exemptions provided by law and where applicable, you may have the right to: Access, correct, update, or request deletion of your Personal Data. |
| 186 | Have the right to complain to a supervisory authority. | 196 | Complain to a supervisory authority. |
| 190 | We respond to all requests we receive from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws. 11. | 200 | We respond to all requests we receive from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws. |
| 201 | Where required or permitted by applicable data protection laws, we may ask you to verify your identity, including by confirming the details of information you have previously provided to us. 11. | ||
| 195 | You may also write to us at: Harvey Corporation, 201 3rd St, Suite 600, San Francisco California 94103 USA, or by contacting our representative in the EU. | 206 | You may also write to us at: Harvey AI Corporation, 201 3rd St, Suite 500, San Francisco California 94103 USA or Harvey AI Ireland Limited, 1st Floor, The Liffey Trust Centre, 117-126 Sheriff Street Upper, Dublin 1, D01 YC43 in the EU. |
| 196 | Please find the contact details of our EAA representative included here below. | 207 | DPO Dr. Felix Wittern, Fieldfisher, whose principal office is at Amerigo-Vespucci-Platz 1, 20457 Hamburg, Germany; DPO@harvey.ai Previous Versions 2025 December 23, 2025 Privacy Policy 2024 December 6, 2024 Privacy Policy |
| 197 | EEA Representative Fieldfisher Jausas, whose principal office is at Paseo de Gracia, 103 7ª planta. | — | Removed |
| 198 | CP 08008. | — | Removed |
| 199 | DPO Dr. Felix Wittern, Fieldfisher, whose principal office is at Amerigo-Vespucci-Platz 1, 20457 Hamburg, Germany; DPO@harvey.ai Previous Versions 2024 December 6, 2024 Privacy Policy Terms of Service Evaluation Terms of Service Platform Agreement Addenda Service Terms Support and Service Level Terms Security Addendum Acceptable Use Policy Data Transfer Addendum Data Processing Addendum Privacy Privacy Center Privacy Policy Cookie Policy Subprocessor List Service Provider Page Law Enforcement Requests Compliance AI Policy | — | Removed |
Follow unlimited companies, monitor the clauses that matter across every platform, and get the full institutional analysis on what each change obligates you to do.