Data practices
Privacy notice
This notice describes the email-protection feature of Hermes, a personal assistant operated privately for its owner. This public information site does not request Google authorization or receive mailbox content.
Information the assistant reads
With the account owner’s authorization, Hermes reads email identifiers, sender and recipient information, dates, subjects, selected headers, message text and relevant conversation history. It reads attachment names, types and sizes, but does not download or analyze attachment contents.
Google access uses the Gmail read-only permission. This permission does not allow Hermes to send, delete, archive or modify Gmail messages. Other connected mail providers are accessed through read-only application operations.
Why information is used
Email data is used to identify important communications, understand whether a reply or action may be needed, prepare brief summaries, prevent duplicate notifications and maintain reliable synchronization. Hermes does not sell Google user data, use it for advertising or train AI models with it.
Hermes’s use and transfer of information received from Google APIs must adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Processing and service providers
The private assistant sends limited message text and conversation context to OpenAI for classification and summarization. Selected summaries are sent through Telegram to the owner’s configured conversation. The infrastructure hosting the private assistant processes the data needed to run these features.
These services are subject to their own terms, privacy policies and account controls. Before live email processing is enabled, the operator must configure the AI service so that connected email data is not used for general model training or improvement.
Storage and retention
Provider credentials are stored separately from source code, with restricted local file permissions. Provider connections use encrypted transport. The assistant retains synchronization cursors, message identifiers, limited metadata, classifications, summaries and delivery records needed for reliability and review. It does not maintain a second full mailbox archive.
Stored metadata and decisions currently have no automatic expiry. The operator controls their retention and removal. Deleting an email at its provider does not automatically remove previously stored assistant records.
Control and deletion
The owner can disconnect Gmail by removing Hermes from Google Account connections. Revoking access stops future authorized Gmail reads; it does not automatically delete records already stored by the assistant. The operator can remove credentials and stored assistant records through the private deployment’s maintenance process.
For questions or a data-removal request, use the operator’s support email displayed on the Google consent screen.
This information site
These pages contain no mailbox connection form, advertising or analytics scripts. The site’s hosting provider may process ordinary connection metadata, such as IP addresses and request logs, to operate and secure the site.