Privacy Policy
1. Who operates the app
Hermes My is a private AI assistant operated by its owner, an individual. For any question about this policy or your data, contact bo2pac@gmail.com.
2. Google data the app can access
When a user connects a Google Account, Hermes My may request permission to access the following Google services: Google Calendar, Gmail, Google Drive, Google Contacts, Google Sheets and Google Docs. These are permissions the app can request. The app reads or changes data in these services only when needed to carry out a task the user asks for, and only within the permissions the user has granted.
3. How the data is used
Google user data is used only to provide the assistant features the user requests, such as viewing and managing calendar events, finding and summarizing information in email or documents, and helping with planning and productivity tasks. Hermes My does not sell Google user data and does not use it for advertising.
Hermes My's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
4. Where data is processed and who may receive it
The assistant runs on a server rented and controlled by the owner. To carry out AI-powered tasks, the content needed for a given request (for example, the text of an email or the details of a calendar event) may be sent through the providers' APIs to external AI providers, including Anthropic (Claude), OpenAI, and other model providers the owner may use (for example, through an aggregator such as OpenRouter). Content is sent only as needed to fulfil the user's request. Those providers process it under their own terms and privacy policies.
5. How credentials are protected
Google OAuth tokens are stored on the owner's server and are used only to make the requests the user has authorized. Tokens are not published, are not included in public code repositories, and are not shared with third parties other than as needed to operate the service. The owner takes reasonable measures to limit access to the server. No method of storage or transmission is completely secure, and absolute security cannot be guaranteed.
6. Storage and deletion
The assistant stores OAuth tokens needed to keep the connection to the user's Google Account working. It does not intentionally keep a copy of the content of Google data (such as emails, files or calendar entries) beyond what is needed to process a request. Content may be held temporarily in memory while a request is being processed. Tokens are kept until the user revokes access or asks for their deletion.
7. How to revoke access
You can withdraw Hermes My's access at any time in your Google Account at myaccount.google.com/permissions: select Hermes My and choose to remove access. After that, the app can no longer use the access you granted.
8. How to request deletion of stored data
To ask for deletion of any stored tokens and related records, email bo2pac@gmail.com. The owner deletes the data manually after receiving the request. Content already sent to an external AI provider is governed by that provider's own retention policies, which Hermes My does not control.
9. Changes to this policy
This policy may be updated. The effective date at the top of this page shows when the current version took effect.