Privacy Policy
This policy describes the personal Hermes assistant operated by its owner. It is not a public service for other users.
Google data accessed and purpose
With the owner's authorization, Hermes may access Gmail messages and settings; Google Calendar; Drive files; Google Docs and Sheets; and read-only Contacts. These permissions are used to carry out tasks the owner requests. The OAuth permissions are broad, so the assistant may technically access data covered by the granted scopes.
AI processing and sharing
When needed to answer a request, relevant Google content may be included in a prompt sent to the AI model provider configured in Hermes. The current provider is OpenRouter, but this can change; the selected provider's privacy and retention terms apply. Google data is not sold or used for advertising by the owner. Google processes data when providing its APIs and Drive storage.
Storage and backups
Hermes credentials and application data are stored on the owner's own computer. The backup script encrypts a local Hermes archive before uploading it to the owner's Google Drive. The script retains up to 10 recent backup files and moves older backups to Drive trash. The passphrase is stored locally; because the archive includes the local Hermes directory, the passphrase file may also be included inside the encrypted archive. Google Drive and the AI provider handle data according to their respective terms and policies.
Retention and deletion
The owner can delete backup files from Google Drive, remove local Hermes data, or revoke the app's Google access from the Google Account security settings. Revoking access prevents future API use but does not automatically delete data already processed or retained by Google or the configured AI provider; their policies and controls apply.
Security and contact
The owner uses HTTPS for this information site and encrypts backup archives before upload. No method of storage or transmission is guaranteed to be completely secure. For questions, use the support email shown on the Google OAuth consent screen.