Privacy policy

Last updated: 4 November 2026

This policy describes the private Hermes Personal Assistant integration operated by the account owner. The public website is informational only and does not accept logins, form submissions or Google user data.

Information accessed

With the owner's Google OAuth authorisation, the integration can access Gmail messages and threads, headers, labels, message bodies and relevant attachments, plus Google Calendar events and event details. Requested scopes are limited to gmail.modify and calendar.events.

Purpose and use

Google user data is used to fulfil the owner's personal instructions: searching messages, preparing summaries, organising the inbox, drafting or sending email and reviewing or managing events. The integration is not a public service and does not use Google user data for advertising or sale.

Processing and sharing

The integration runs on an owner-controlled Google Cloud VM. Relevant extracted message or event information may be sent to the configured external AI model provider to process a request, subject to that provider's terms and retention settings. Google API calls are made to Google. Information may be disclosed to intended recipients when the owner requests an action such as sending a message or inviting an attendee.

Storage and retention

OAuth credentials are stored on the owner's VM with local access restrictions. Depending on configuration, message or calendar information may also remain in agent history, caches or logs. Retention varies with those settings and is not represented here as a fixed period. The owner can remove local data and disable the integration.

Control and revocation

Google access may be revoked through Google Account third-party connections. Revocation prevents future authorised API access; previously processed local information may require separate deletion. The assistant is configured to request owner approval before consequential write actions, but safeguards depend on the installed implementation.

Security and policy

Data use is intended to remain limited to user-requested personal-assistance functionality, consistent with the Google API Services User Data Policy and its Limited Use requirements. No system can guarantee absolute security.

Contact and changes

This independent personal project is maintained by its account owner. Questions can be directed through the owner's GitHub profile. Material changes to data-handling practices will be reflected in this policy.