India Applicant Privacy Notice
Last updated: July 16, 2026
Introduction
Harvey AI India Private Limited and its affiliates (“Harvey”, “we”, “us” or “our”) respects your right to privacy and we are committed to securing and protecting any information we have about you.
This privacy notice (this “Notice”) describes the ways we collect, use and share personal data that relates to job applicants, including referrals and applicants who have applied directly through our website as well as through third party agencies and recruiters. Furthermore, this Notice applies to those applicants who have applied to work for a Harvey company in India.
It is important you read this Notice so that you are aware of how and why we are using information that relates to you (“Personal Data”), your rights and how the law protects you. This Notice also explains how you can exercise your rights under applicable privacy and data protection laws.
Personal Data We Collect and Use
With your consent, where required by applicable law, we collect Personal Data directly from you when you apply for a job at a Harvey company and we also collect Personal Data from third parties. All the Personal Data we collect, both from you, from third parties about you, and automatically is outlined in the table below.
Category of Personal Data Collected | Examples (where applicable) |
|---|---|
Identity Data | Information to help us identify you including, first name, middle name(s), surname, title, government issued identifiers such as national identification and/or passport details, other tax-related information, driver’s license, photographs. |
Contact Data | Information to allow us to contact you including, your home address, work address, email address and telephone numbers. |
Biographical and Demographic Data | Title, date of birth, gender, education history, professional history, professional qualifications and memberships, references, information contained within letters of application and CVs, references, language proficiencies and other skills, certifications, certification dates, and social media biographies and photographs. |
Immigration Information | Information that would allow us to verify your employment eligibility including, national identification, passport number, details of residency, and work permit. |
Other Data | This might include data not listed above that you provide to us, such as your feedback and survey responses where you choose to identify yourself. |
Content and Communications | Interview records, assessment responses, recordings (if applicable), and results including for psychometric and ability tests (if applicable). |
Information we collect automatically | Information that your browser or device automatically sends us when you use Harvey’s systems (e.g. devices, communications, IT systems and applications). |
How We Use Your Personal Data and Our Legal Basis
Harvey may collect, use and disclose your Personal Data for purposes related to your prospective employment and (if hired) for your employment or working relationship, including:
- Create and manage the recruitment process, job applications, and a database of interested individuals and leads.
- Assess and evaluate your skills, qualifications and interests against the position applied for and other positions within Harvey, including to determine the compensation and other benefits that may be offered to you. We may use artificial intelligence (AI), machine-learning tools and algorithms, including those provided by third parties to help us screen, identify, and evaluate suitable applicants and review/analyze applicant information based on relevant qualifications, skills, and experience. The hiring team evaluates the results of this analysis, along with other factors, in considering an applicant for a role.
- Create recordings and transcripts of interviews, including using AI systems for transcription, note taking, and summaries.
- Communicate with you about your interest in Harvey, job opportunities, applications, or the recruitment process.
- Verify your information, including through reference checks, employment and education verification, and, where applicable, background checks.
- Send you information about the onboarding and employment experience before your first day.
- Keep your record for future hiring needs, including for the purpose of communicating with you and providing you with information regarding potential career opportunities that suit your profile.
- Comply with legal obligations (including employment laws and regulations), deal with legal disputes and to establish, exercise and defend potential legal claims.
Data Sharing and Data Transfers
In carrying out the purposes listed above, Harvey may share your Personal Data with third parties including with:
- Affiliates. Our corporate parent (Harvey AI Corporation), subsidiaries, and other affiliates (when they become incorporated) under the control of our corporate parent.
- Service Providers. These service providers process Personal Data on Harvey’s behalf. The service providers may include recruiting, HR tools, screening, verification, or background checks, compensation benchmarking, and hosting.
- Government regulators, law enforcement, tax authorities, court officials and others. We may share your Personal Data if necessary to comply with legal or regulatory obligations.
- Professional advisors, including lawyers, immigration advisors, and other professional advisors.
In such circumstances, the processing of your Personal Data may involve a transfer of your Personal Data to countries based outside India. In making such transfer, we will comply with applicable requirements set out under applicable data privacy laws.
Data Retention
Harvey’s retention periods for Personal Data are based on business needs and legal requirements. We retain Personal Data for as long as is necessary for the processing purpose(s) for which it was collected, as set out in this Notice, and any other permissible, related purposes. For example, we may retain certain information to comply with regulatory requirements regarding the retention of such data, or in the event a litigation hold is imposed.
When Personal Data is no longer needed or when you withdraw your consent, whichever is earlier, we either irreversibly anonymise the data (and we may further retain and use the anonymised information) or securely destroy the Personal Data.
Data Security
The security of your information is important to us. We protect your Personal Data through technical and organizational measures in accordance with applicable data privacy laws designed to mitigate the risk of unlawful or unauthorized access, destruction, loss, alteration, disclosure, or use of your Personal Data. The measures are designed to provide a level of security appropriate to the risk of processing.
You Rights Relating to your Personal Data
Under certain circumstances, by law you have the right to:
- Withdraw consent you have provided for the processing of your Personal Data. You may withdraw your consent at any time, but you should be aware that such withdrawal may inhibit our ability to consider your application for employment or retain you for employment.
- Request access to your Personal Data. This enables you to access and/or receive a copy of the Personal Data we hold about you and obtain additional information about the Personal Data about you that we process.
- Request correction of the Personal Data that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected, completed, and/or updated
- Request erasure of your Personal Data. This enables you to ask us to delete or remove Personal Data where there is no good reason for us continuing to process it, under conditions set forth in the DPDP.
- Grievance Redressal. You have the right to raise grievance regarding the processing of your Personal Data or any violation of your rights under this Privacy Policy or applicable law by contacting us as set out in the section on complaints below.
- Right to Nominate. This enables you to nominate another individual who can, in the event of your death or incapacity, exercise your rights as set out above in accordance with applicable law on your behalf.
Please also note that in certain circumstances the rights above will not apply and some categories of Personal Data will be exempt from the scope of those rights. We will notify you where this is the case.
How to exercise your rights:
If you want to exercise any of the rights described above, please email us at privacy@harvey.ai.
Contact Us
Please direct any questions or inquiries about this Notice to the privacy team via email at privacy@harvey.ai.
Complaints
If you would like to make a complaint regarding this Notice, you can contact us using the contact details shown in the “Contact Us” section above. We will reply to your complaint as soon as we can and in accordance with applicable law.
The DPDP also gives you the right to make a complaint directly to the Data Protection Board of India (“Board”) once you have exhausted the grievance redressal mechanism set out herein. We will update this Notice when contact details for the Board are made available.