Privacy Policy

Hermes Agent — personal, self-hosted AI assistant. Last updated 23 September 2026.

This policy describes how the Hermes Agent application ("the app") handles data obtained through Google APIs. The app is a private, single-user installation operated by its owner; it has no other users and is not offered to the public.

1. Data controller

The owner of this installation, contactable at vysotskyav@gmail.com.

2. What data the app accesses

Gmail (gmail.readonly, gmail.modify, gmail.send) — reading, labelling and drafting email at the owner's request.
Google Calendar (calendar) — reading and creating events.
Google Drive (drive) — reading and managing the owner's own files.
Contacts (contacts.readonly) — looking up names when asked.
Sheets and Docs (spreadsheets, documents) — reading and editing the owner's own documents.

3. How the data is used

Data is used solely to perform tasks the owner explicitly requests in chat with the app (for example: "summarise today's unread email", "add an event on Friday", "find a document"). The app does not use Google data for advertising, profiling, credit or lending decisions, or any purpose unrelated to the owner's requests.

4. Storage and retention

The app runs on a private server controlled by the owner. Retrieved content is kept in that server's local storage only for as long as it is needed to complete the owner's request or to keep the chat history the owner can read and delete. Data on Google's side remains under the owner's own Google account, governed by Google's terms.

5. Sharing with third parties

Google user data is not sold, rented, or shared with third parties, and is not used to train third-party models. To generate answers, the app sends the text required for a request to the large-language-model API configured by the owner (for example DeepSeek). Documents the owner marks as confidential are processed locally on the owner's own hardware instead. No human other than the owner reads the data.

6. Security

OAuth tokens are stored on the owner's private server with file permissions limited to the server's administrator account, and are transmitted only to Google over HTTPS.

7. Revoking access and deleting data

The owner can revoke the app's access at any time at myaccount.google.com/permissions, which immediately ends all API access. Deleting the app's local chat history and stored tokens removes the remaining copies.

8. Changes to this policy

Any change will be published on this page with an updated date. Continued use of the app after a change constitutes acceptance of the revised policy.