Privacy Policy

Last updated: 6 September 2026

Hermes is a personal, self-hosted assistant operated by a single individual for their own private use. It has no other users and does not collect data from anyone else.

What data is accessed

With the operator's explicit Google consent, Hermes accesses:

• Gmail (read-only) - message metadata and content from the operator's own mailbox, used to summarise messages and generate personal reports such as monthly expense summaries.
• Google Calendar - events from the operator's own calendar, used for scheduling context.

Hermes only ever accesses the Google Account that granted it consent. It does not access anyone else's account.

How data is stored

• Data is processed on a private server controlled solely by the operator.
• OAuth tokens are stored on that server with file permissions restricted to the owning system account.
• Message content is held only for as long as needed to answer a request or produce a report.

How data is shared

Data is not sold, rented, or shared with third parties. Message text may be sent to the third-party language-model provider that powers the assistant solely to generate a response to the operator's own request. No data is used to train models, and no data is disclosed to any other party.

Use of Google user data

Hermes's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Retention and deletion

The operator can revoke access at any time at myaccount.google.com/permissions, which immediately invalidates all stored tokens. Local data can be deleted by removing the application's data directory from the server.

Contact

kutekales@gmail.com