65 Total
16 High severity
43 Medium severity
6 Low severity

Key Facts

Who may Harvey AI provide information to?
Harvey AI may provide a user or their employer with information about the user's account and use of the Services, including Account Information and Log Data.
What may Harvey AI provide about a user's account and use of the Services?
Harvey AI may provide a user or their employer with information about the user's account and use of the Services, including Account Information and Log Data.
How will Harvey AI collect, use, and disclose information about individuals in Canada?
Harvey AI will only collect, use, and disclose information about individuals in Canada in accordance with Canadian law, processing Personal Data with consent and/or adequate notice only when required.
What does Harvey AI require when processing Personal Data in Canada?
Harvey AI will only collect, use, and disclose information about individuals in Canada in accordance with Canadian law, processing Personal Data with consent and/or adequate notice only when required.
What right does Harvey AI acknowledge?
Harvey AI acknowledges a right to withdraw consent to the collection, use, and disclosure of Personal Data, subject to limits in applicable law, and states that withdrawal of consent may result in Harvey AI being unable to continue providing Services.
What may result from withdrawal of consent?
Harvey AI acknowledges a right to withdraw consent to the collection, use, and disclosure of Personal Data, subject to limits in applicable law, and states that withdrawal of consent may result in Harvey AI being unable to continue providing Services.
Is withdrawal of consent subject to limits in applicable law?
Harvey AI acknowledges a right to withdraw consent to the collection, use, and disclosure of Personal Data, subject to limits in applicable law, and states that withdrawal of consent may result in Harvey AI being unable to continue providing Services.
What governs in the event of a conflict between the Privacy Policy and the DPF Principles?
In the event of a conflict between the Privacy Policy and the EU-U.S. DPF Principles, the UK Extension, or the Swiss-U.S. DPF Principles, the applicable DPF Principles govern.
In accordance with what will Harvey AI delete a customer's data?
Harvey AI will delete a customer's data in accordance with the terms of that customer's Customer Agreement.
When will Harvey AI delete a customer's data?
Harvey AI will delete a customer's data in accordance with the terms of that customer's Customer Agreement.
Stay ahead of the changes
Track Harvey AI and get the diff the day its terms change.
Summary

Harvey AI's Privacy Policy covers personal account and usage data collected about you, but it does not cover anything you actually submit to or receive from the platform—those inputs, outputs, and documents are outside the Policy's protections entirely. Your employer may receive information about your account activity and usage logs, and Harvey AI may share your information with law enforcement without being legally required to do so. You have the right to withdraw consent to Harvey AI's data collection and use, but doing so may result in Harvey AI being unable to continue providing Services to you.

Analysis

Harvey AI's Privacy Policy establishes the scope, use, sharing, and retention of Personal Data collected in connection with its Services, while explicitly carving out inputs, outputs, and documents processed on the platform from the Policy's coverage entirely. Harvey AI acts as a Data Processor for Customer Data and Content, with Customers designated as Data Controllers, and retains Personal Data according to individual Customer Agreements rather than a uniform Policy-defined schedule. Harvey AI collects granular Service Usage Data including email addresses, account identifiers, interaction patterns, query volume, and query type, and may use and share Personal Data for interest-based advertising where law permits and opt-in consent is obtained where required. Harvey AI may voluntarily disclose user information to law enforcement or third parties based on its own good-faith belief of reasonable necessity, and may share account information and log data with a user's employer. Where the Policy conflicts with the EU-U.S., UK, or Swiss-U.S. Data Privacy Framework Principles, those Principles govern.

What this means for you

The most direct impact on an individual user is that the data generated during actual platform use—queries submitted and results received—falls entirely outside this Policy's protections, while behavioral and identity data such as email address, visit frequency, and query patterns are collected and covered. A user's employer may receive detailed account and log data about that user's individual activity. Where interest-based advertising applies, Harvey AI uses and shares Personal Data with third parties, subject to opt-in consent where law requires it. Users have a stated right to withdraw consent to the collection, use, and disclosure of their Personal Data; exercising that right may result in Harvey AI being unable to continue providing Services.

Institutional Analysis
Stay ahead of the changes

Institutional analysis available with Insight

Which mapped governance frameworks each document engages, tied to the specific provisions that engage them.

Featured, High severity
Featured, Medium severity

Complete Provision Index

Every distinct legal provision identified in this document. Featured provisions appear above with analysis.

65 provisions
12 featured
16 clause types
16 high severity
Restricted or Prohibited Content/Industries 1 1 high
Targeting and Audience Restrictions 1 1 high
AI / Automated Decision-Making 1
Enforcement Actions 1
Stay ahead of the changes

Monitoring

Harvey AI has updated this document before. Monitor includes same-day alerts, structured change summaries, and monitoring for up to 20 platforms.

Stay ahead of the changes

Governance Intelligence

Need provision-level monitoring and regulatory mapping? Insight includes governance timelines, drift analysis, and full provision tracking.

Cross-platform context

See how other platforms handle Account and usage data shared with employer Customers and similar clauses.

Compare across platforms →
Archival ProvenanceSource & Archival Record
Last Captured July 11, 2026 04:16 UTC
Capture Method Automated scheduled archival capture
Document ID CA-D-000503
Version ID CA-V-004729
SHA-256 deffd5f332c645cc5de5b366782cbdba5963a159846fd818af45e1284b2a9344
✓ Snapshot stored ✓ Text extracted ✓ Change verified ✓ Hash verified

Governance Monitoring

Monitor governance changes across the platforms you rely on.

Structured alerts for policy changes, governance events, and provision updates across 352+ platforms.

Start monitoring → Compare plans