Is Harvey safe with your data?

Two quoted passages were not Harvey's

The deletion quote ("the right to request that we delete personal data collected from you") and the de-identification quote ("We apply aggregation and de-identification techniques where appropriate as part of our data minimization practices") appear nowhere in Harvey's documents; both are Anthropic wording. Harvey's own text is weaker on each point.

Rights list is conditional, not a granted mechanism

Every right sits under one hedge: "Subject to certain exceptions and exemptions provided by law and where applicable, you may have the right to", exercised only by contacting the company at section 12. No portal, timeframe or named tool backs access, deletion, portability, correction or objection.

No shorter retention for AI logs

The service terms mention a workspace retention setting only to carve features out of it: "Your workspace retention setting will not apply to certain features, as outlined in our Documentation". No period or number appears anywhere, so this limits retention control rather than shortening it.

Nothing adverse is explicitly reserved

Harvey is silent on training with customer inputs rather than claiming the right, states "IP ownership ... is not impacted by its use in the Services" rather than taking a perpetual licence, and pairs its CCPA sale/share admission with a named opt-out ("Your Privacy Choices" plus Global Privacy Control), so no indicator is marked adverse.