Privacy Policy

Google data Hermes accesses

Hermes requests only these read-only permissions:

• Gmail read-only: to search for and read relevant messages and attachments.
• Google Drive read-only: to search for and read relevant files and file metadata.

Hermes cannot send or delete email, change messages, or modify files in Google Drive through these permissions.

How Google data is used

Hermes uses Google data only to carry out workflows that you request, such as finding invoices, receipts, contracts, tax records, and other bookkeeping documents. Google user data is not used for advertising, marketing profiles, or unrelated product development.

Use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Processing, storage, and retention

Hermes runs on your Mac mini. Google data is fetched from Google APIs and processed there for the workflow you request. OAuth tokens are stored locally on that Mac mini and remain there until you revoke access or delete them.

Any files, attachments, exports, or other artifacts that you choose to download remain under your control on your own systems until you delete them. Revoking Google access prevents new access, but does not automatically delete copies that you previously downloaded.

Sharing and disclosure

Google user data is not sold, rented, shared with advertisers, or disclosed to third parties for their own purposes. Data may be processed by service providers only when strictly necessary to perform a workflow that you request or to operate Hermes, subject to applicable confidentiality and data-protection obligations.

Security

Hermes limits access through read-only OAuth scopes and local access controls. No method of storage or transmission is completely secure, so you are responsible for protecting access to your Google account and Mac mini.

Your choices and deletion

You can revoke Hermes access at any time from your Google Account permissions. You can also delete locally stored tokens and downloaded artifacts, or contact us for help doing so.

Contact

Questions or deletion requests can be sent to david@theaicompany.com.