How Hermes handles Google user data

Scope and purpose

Hermes Personal Agent is a privately operated personal AI assistant. It is not offered as a public service. Hermes accesses only Google accounts that its operator explicitly authorizes and uses Google data only to perform personal-assistant tasks requested by the operator.

Google data Hermes can access

Depending on the task and the permissions granted, Hermes can:

• read, send, and organize Gmail messages;
• read and manage Google Calendar events;
• read and manage files in Google Drive;
• read and edit Google Docs and Google Sheets; and
• read Google Contacts.

Google’s permission screen shows the specific access requested. The operator can decline authorization or revoke it at any time.

How data is processed

Google data is processed only to complete a requested task, such as finding a message, summarizing information, preparing a draft, or updating an authorized Workspace item. Hermes normally uses an AI model running locally on the operator’s Mac mini.

If configured fallback routing is used, content needed for the task may be sent to the configured third-party AI model provider for processing. Provider handling is then subject to that provider’s terms and privacy practices. Hermes does not use Google data to train a public model.

Storage and retention

Google OAuth client credentials and refresh tokens are stored locally on the operator’s Mac mini. Google content remains in the authorized Google account unless a requested task changes it. Local operational logs, caches, or task output may be created as part of running and troubleshooting Hermes; their contents and retention depend on the local configuration and the task performed.

This policy does not claim that all local data is encrypted or that processing creates no temporary copies. Access to the Mac mini and its Hermes files is limited to the operator’s personal computing environment.

Sharing, advertising, and sale

Google user data is not sold and is not used for advertising. It is not shared except when needed to perform an explicitly requested function, including processing by a configured AI model provider, or when required by law. Hermes does not expose Google user data as a public service.

Google API Services User Data Policy

Hermes Personal Agent’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

Your choices

The operator can review or revoke Hermes’ Google access from the Google Account third-party connections page. Revoking access prevents Hermes from making new Google API requests until it is authorized again. Source data can be reviewed and managed directly in the relevant Google service.

Contact

Questions about this policy or Hermes’ use of Google data can be sent to hermes-personal-agent-support@googlegroups.com.

Changes to this policy

This policy may be updated when Hermes’ configuration or data use changes. The effective date above will be revised when material changes are published.