Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This page describes what the document states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability may vary by jurisdiction. Methodology
Harvey AI's Privacy Policy covers personal account and usage data collected about you, but it does not cover anything you actually submit to or receive from the platform—those inputs, outputs, and documents are outside the Policy's protections entirely. Your employer may receive information about your account activity and usage logs, and Harvey AI may share your information with law enforcement without being legally required to do so. You have the right to withdraw consent to Harvey AI's data collection and use, but doing so may result in Harvey AI being unable to continue providing Services to you.
Harvey AI's Privacy Policy establishes the scope, use, sharing, and retention of Personal Data collected in connection with its Services, while explicitly carving out inputs, outputs, and documents processed on the platform from the Policy's coverage entirely. Harvey AI acts as a Data Processor for Customer Data and Content, with Customers designated as Data Controllers, and retains Personal Data according to individual Customer Agreements rather than a uniform Policy-defined schedule. Harvey AI collects granular Service Usage Data including email addresses, account identifiers, interaction patterns, query volume, and query type, and may use and share Personal Data for interest-based advertising where law permits and opt-in consent is obtained where required. Harvey AI may voluntarily disclose user information to law enforcement or third parties based on its own good-faith belief of reasonable necessity, and may share account information and log data with a user's employer. Where the Policy conflicts with the EU-U.S., UK, or Swiss-U.S. Data Privacy Framework Principles, those Principles govern.
The most direct impact on an individual user is that the data generated during actual platform use—queries submitted and results received—falls entirely outside this Policy's protections, while behavioral and identity data such as email address, visit frequency, and query patterns are collected and covered. A user's employer may receive detailed account and log data about that user's individual activity. Where interest-based advertising applies, Harvey AI uses and shares Personal Data with third parties, subject to opt-in consent where law requires it. Users have a stated right to withdraw consent to the collection, use, and disclosure of their Personal Data; exercising that right may result in Harvey AI being unable to continue providing Services.
Which mapped governance frameworks each document engages, tied to the specific provisions that engage them.
Every distinct legal provision identified in this document. Featured provisions appear above with analysis.
Harvey AI has updated this document before. Monitor includes same-day alerts, structured change summaries, and monitoring for up to 20 platforms.
Need provision-level monitoring and regulatory mapping? Insight includes governance timelines, drift analysis, and full provision tracking.
Cross-platform context
See how other platforms handle Account and usage data shared with employer Customers and similar clauses.
Compare across platforms →Governance Monitoring
Structured alerts for policy changes, governance events, and provision updates across 352+ platforms.