Hermes

Last updated 20 September 2026

Privacy policy

Hermes Personal Assistant is a private, non-commercial tool operated for one user. This policy explains how it accesses and handles Google user data.

Google data accessed

Depending on the operator’s request, Hermes may access Gmail messages and metadata, Google Calendar events, Google Drive files and metadata, Google Docs, Google Sheets, and Google Contacts. Access is authorised by the operator through Google OAuth.

How data is used

Google user data is used only to provide functions requested by the operator, including search, summarisation, organisation, drafting, meeting preparation, and approved updates to Workspace data. It is not used for advertising, profiling for sale, credit decisions, or unrelated purposes.

AI processing

Information selected for an assistant task may be sent to the configured AI service provider so that the requested task can be completed. The operator controls which provider is configured. Data is not transferred for advertising or sold to third parties.

Storage and security

OAuth credentials and assistant session data are stored within the operator’s private Hermes installation. Access is restricted to the operator and the services required to run the assistant. Reasonable technical controls are used to protect stored credentials and data, but no system can guarantee absolute security.

Sharing

Google user data is not sold. It is shared only with service providers required to operate the assistant, such as the configured AI processing provider, or when required by law. The assistant is not available to unrelated users.

Retention and deletion

Google data may appear in private assistant session history or files created at the operator’s request. The operator controls that local history and may delete it. OAuth access can be revoked through the operator’s Google Account, after which the stored OAuth credentials can be removed from the Hermes installation.

Google API Limited Use

Hermes Personal Assistant’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

Contact

Questions about this policy can be sent to privacy@gflic.com.