Harvey Point is committed to the responsible handling of all information. This policy describes how we collect, use, and protect data across all Harvey Point platforms and services.
Harvey Point is a research organization. We do not monetize user data. We do not sell, license, or broker personal information to third parties for commercial purposes. The data we collect is limited to what is operationally necessary to deliver our platforms and improve our analytical services.
This Privacy Policy describes what information we collect, how we use it, how we protect it, and what choices you have with respect to your information. It applies to all Harvey Point digital platforms, research portals, demonstration environments, and associated services.
Harvey Point collects information in two categories: information you provide directly, and information collected automatically through your interaction with our platforms.
Directly provided information includes: account registration data (name, institutional affiliation, email address); inquiry and correspondence content submitted through contact channels; feedback, commentary, and research submissions; and any information provided in the course of professional engagements, partnerships, or research collaborations.
Automatically collected information includes: technical identifiers such as IP address and browser fingerprint; platform usage patterns including pages accessed, features engaged, and session duration; device and operating system metadata; and interaction data with interactive analytical demonstrations such as Harvey Point Method™ (HPm) and Harvey Point Analytics (HPa).
Harvey Point does not collect biometric data, location data beyond regional approximation via IP, or financial information unless required for a specific commercial engagement under a separate agreement.
Information collected by Harvey Point is used for the following purposes: delivering and improving our platforms and analytical services; understanding how users engage with our research and methodology demonstrations; communicating with registered users regarding platform updates, research publications, and service changes; enforcing our Terms of Use and Ethics Framework; and complying with applicable legal obligations.
Harvey Point does not use personal information to build advertising profiles. We do not use behavioral data to target users with commercial advertising. We do not engage in automated decision-making that produces legal or similarly significant effects on individuals without human review.
Analytical data derived from platform usage may be used in aggregate, anonymized form to improve Harvey Point's research methodology, platform design, and user experience.
Harvey Point does not sell personal information. We share information only in the following limited circumstances:
With service providers operating under contractual obligations that prohibit secondary use or disclosure — including infrastructure providers, security services, and platform analytics providers — where sharing is necessary to deliver Harvey Point services.
With law enforcement, regulatory authorities, or other government agencies where disclosure is required by applicable law, court order, or lawful governmental request. Harvey Point will notify affected users of such requests to the maximum extent permitted by law.
With professional advisors — legal counsel, auditors, insurers — under applicable professional confidentiality obligations.
In connection with a merger, acquisition, or organizational restructuring, where successor entities are bound to respect the commitments in this policy with respect to existing users' information.
Harvey Point maintains reasonable and appropriate technical and organizational measures to protect user information against unauthorized access, disclosure, alteration, or destruction. These measures include encryption in transit and at rest for sensitive data, access controls limiting data access to personnel with a legitimate operational need, regular security assessments of our infrastructure, and incident response protocols.
No security system is impenetrable. Harvey Point cannot guarantee absolute security against all threat vectors. In the event of a data security incident involving personal information, Harvey Point will notify affected users and relevant regulatory authorities as required by applicable law.
Harvey Point retains personal information for as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required or permitted by law. Platform usage data is retained for a period sufficient to support service improvement and security investigations, typically not exceeding 24 months on a rolling basis. Account information is retained for the duration of an active account relationship and for a reasonable period thereafter consistent with legal obligations and legitimate business purposes.
Users may request deletion of their personal information subject to limitations where retention is required by law or for the protection of Harvey Point's legitimate legal interests.
Depending on your jurisdiction, you may have rights with respect to your personal information including: the right to access the information we hold about you; the right to correct inaccurate information; the right to deletion under applicable law; the right to restrict or object to certain processing; and the right to data portability where technically feasible.
To exercise any of these rights, contact Harvey Point through official channels. Harvey Point will respond to verified requests within the timeframe required by applicable law. Harvey Point reserves the right to verify the identity of individuals making requests and to decline requests that are manifestly unfounded, excessive, or in conflict with legal obligations.
Harvey Point's platforms are not directed at individuals under the age of 18. We do not knowingly collect personal information from minors.
Harvey Point reserves the right to update this Privacy Policy to reflect changes in our practices, legal obligations, or platform capabilities. Material changes will be communicated to registered users with appropriate advance notice. Continued use of Harvey Point platforms following the effective date of any update constitutes acceptance of the revised policy.
The effective date of the current version of this policy is noted in the document header. Questions or concerns regarding Harvey Point's privacy practices should be directed to Harvey Point through official communication channels.