Privacy Policy

Hermes · Last updated September 18, 2026

Hermes ("the app") is a private, single-user assistant operated by one individual for their own personal Google account. This policy explains what data the app accesses and how it is handled.

Who operates Hermes

Hermes is operated by an individual for personal use only. It is not a commercial product and has no users other than its operator. Contact: cmgduggan@gmail.com.

What data the app accesses

With the operator's explicit authorization through Google's OAuth consent screen, Hermes accesses the operator's own Google data, which may include:

• Gmail — reading, organizing, drafting, and sending the operator's email.
• Google Calendar — reading and managing the operator's calendar events.
• Google Drive — reading, creating, and organizing the operator's files.
• Google Docs and Sheets — reading and editing the operator's documents and spreadsheets.
• Google Contacts — read-only access to the operator's contacts, used to resolve names and addresses.

The app only accesses the account of the person who authorizes it. It does not access anyone else's data.

How data is used

Data is used solely to perform the tasks the operator requests — such as summarizing email, drafting replies, managing calendar events, and working with the operator's own files and documents. Data is not used for advertising, profiling, or any purpose beyond providing these features to the operator.

How data is shared

Hermes does not sell, rent, or share the operator's data with any third party. Data may be transmitted to the AI/model provider that powers the assistant strictly to process the operator's own requests, and to Google's APIs to carry out authorized actions. It is not shared for any other reason.

Data storage and retention

The app accesses Google data on demand to fulfill requests and does not maintain a separate long-term copy beyond what is needed to operate. OAuth credentials are stored securely and used only to access the operator's account.

Google API Services / Limited Use

Hermes's use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

Revoking access

The operator can revoke Hermes's access at any time at myaccount.google.com/permissions.

Changes to this policy

This policy may be updated from time to time. Material changes will be reflected on this page with a revised date.