Privacy policy

Data accessed

When an account owner authorizes Google access, Hermes can access the account identity and the services covered by the granted permissions: Gmail messages, attachments, labels and settings; Drive files, contents and sharing information; Docs, Sheets and Slides content; Calendar events; contacts and available directory information; and Tasks. It also processes the instructions and messages sent to the assistant.

Purpose and account control

Data is used to provide the assistance requested by the account owner, such as finding information, summarizing email, drafting or sending messages, editing documents, managing files, scheduling events, and maintaining contacts and tasks. Write operations affect the selected Google account and remain subject to Google and organization permissions.

Google account data is not sold, used for advertising, or collected to build general-purpose machine-learning datasets. This deployment’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.

Processing and service providers

The assistant runs on a server hosted by Hetzner. Content relevant to a request may be sent to OpenAI for AI processing through the configured model connection. Messages and replies exchanged through iMessage pass through Photon, the messaging integration. If a request involves another connected service, the information necessary to perform that request may be sent to that service. Google data is not automatically posted to the public website.

Service providers process data under their applicable terms and privacy practices. Use of connected services should take account of the sensitivity of the requested information. The operator can access the server’s stored data to administer the private deployment, address security issues, or provide support.

Storage and retention

OAuth credentials are stored on the server for continued access and protected by file permissions; Google CLI credentials use an encrypted file keyring. Conversation history, tool results, saved files, and operational records may be retained on the server until the operator deletes them. There is currently no fixed automatic deletion period for assistant history. Copies processed or delivered by service providers are subject to those providers’ retention practices.

This informational website uses no analytics scripts, advertising trackers, or application cookies. The web server processes connection information to deliver pages and may record errors for operation and troubleshooting.

Revocation and deletion

Account owners can revoke Hermes access at Google Account connections. Revocation stops future access using that authorization; it does not automatically erase previously saved conversations or files. To request deletion of stored credentials, assistant history, or downloaded account data, contact the operator below. Removing a local copy does not delete the original Google item.

Contact and updates

Operator: Josh Chang. For questions, access concerns, or deletion requests, email joshchang04@gmail.com. Material changes to how connected Google data is used will be disclosed here, and additional authorization will be requested where required.