Privacy Policy

Hermes is a private, single-user application. The only Google account it accesses is the one belonging to its owner, who authorized it directly.

Data accessed

Only when the owner asks, Hermes may read, create, modify or send Gmail messages, calendar events, Drive files, Docs and Sheets in the owner's account, and read (but not change) the owner's contacts.

Use

Google user data is used only to carry out the owner's requests. Hermes does not sell Google user data, share it with third parties for advertising, or itself use it to train generalized AI or machine-learning models.

Where data goes

• AI model provider. To answer a request, Hermes sends the relevant content to the AI model provider the owner has configured. The provider handles that content under its own terms.
• Owner's messaging channels. Replies that include Google content may be delivered through messaging services the owner uses to talk to Hermes, such as iMessage, email or Telegram.

Storage and retention

OAuth tokens are stored on the owner's own devices. Google content that Hermes reads may be kept in the owner's session logs and in the agent's memory store, on the owner's own devices and servers, until the owner deletes it. Apart from the AI provider and messaging services above, which keep content under their own terms, Hermes keeps no copies anywhere else.

Limited Use

Hermes's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Revoking access

Access can be revoked at any time at myaccount.google.com/permissions. Revoking access and deleting the stored token ends all further access.

Contact

zoridoshq@gmail.com