Privacy policy

How this personal integration handles data

This policy describes Hermes Personal Gmail and Drive, a privately operated integration for its Google account owner.

Google data accessed

With the owner’s authorization, the integration may access Gmail message content, headers, attachments, labels, and drafts, and Google Drive file content and metadata. The granted permissions determine the available operations.

Purpose and processing

Data is used for the owner’s requested personal productivity tasks, such as finding information, summarizing documents, preparing messages, and organizing files. Relevant data may be processed locally by Hermes and by the AI providers or tools configured by the owner to carry out those tasks. The scope of each task should be limited to the data needed.

Sharing and permitted use

The integration does not sell Google user data or use it for advertising. It does not use Google user data to train generalized AI or machine-learning models. Transfers to configured service providers are limited to carrying out the owner’s requested functions and must meet Google’s Limited Use requirements. Human access is limited to the owner or access the owner explicitly permits, except where necessary for security or legal obligations.

The integration’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

Storage, security, and retention

Google authorization credentials are stored in the owner’s Hermes profile on their computer and are not published on this website. Content included in conversations, notes, exports, or logs may persist until the owner removes it. Processing and retention by configured external providers depend on the owner’s configuration and those providers’ terms; this policy does not promise zero retention by those providers.

Control, revocation, and deletion

The owner can revoke this integration through their Google Account’s third-party connections settings. Revocation stops future authorized access but does not automatically remove earlier local conversations, notes, downloaded files, or provider records. Those records must be removed from the systems that hold them, subject to applicable retention requirements.

This informational website

These pages contain no mailbox contents, Drive files, or credentials. They use no analytics scripts, tracking pixels, or application cookies. The hosting provider may process ordinary request information, such as IP addresses, to deliver and protect the site.

Contact

For questions or deletion requests, contact the operator using the support contact shown on the Google authorization screen.