Privacy Policy

Hermes Personal — a single-user automation agent. Last updated 30 October 2026.

1. What Google data is accessed

With the owner's explicit consent, the agent can access:

• Gmail — read, and send or modify messages when asked.
• Google Calendar — read and create events.
• Google Drive — read and retrieve files.
• Google Sheets and Google Docs — read content.
• Google Contacts — read contact entries.

2. How it is used

Solely to carry out instructions given by the account owner: triaging his inbox, drafting replies he approves, scheduling his calendar, and retrieving documents he asks for. The data is not used for advertising, profiling, model training, or any purpose beyond executing those instructions.

3. Who can see it

Nobody but the account owner. This is not a public service: there are no other users, no customer accounts and no third-party recipients. Data is not sold, shared or disclosed to anyone except where a task explicitly requires it — for example, sending an email the owner has approved — or where required by law.

4. Where it is stored and for how long

On servers controlled by the account owner. Copies of retrieved messages, documents and events are kept only as long as needed to complete and audit the task — typically as part of the agent's session history — and are deleted when the owner deletes them or revokes access.

5. How to revoke access

The owner can remove this app's access at any time at myaccount.google.com/permissions. Revoking immediately stops any further access; previously retained session history is then deleted on request.

6. Security

Access is held as an OAuth token stored on the owner's server with file permissions limited to the account owner. Credentials are never written into source code, shared, or placed in any public repository.

7. Changes

If what this agent accesses or how it is handled changes, this policy is updated and the date above is revised.

8. Contact

Questions or deletion requests: carsonor817@gmail.com.