Privacy policy

Effective October 1, 2026. Operator: Brian. Contact: [email protected].

Google data accessed

With consent, the connector may access account identity; Gmail message headers, bodies, attachments and labels; and Google Calendar lists, event details, participants and availability. Authorized permissions support Gmail reading, organization and sending, and Calendar reading and event management.

Purpose and use

Data is used to provide the account holder’s requested personal-assistant functions, including answering questions, organizing messages, preparing communications, scheduling, reminders and explicitly configured automations. Writes, sending and other actions are governed by the account holder’s instructions and granted permissions.

Processing and sharing

Relevant Google data may be processed by the privately operated Hermes system and the AI providers configured for that assistant to fulfill requested tasks. This is not a promise of on-device-only processing. Those providers may process or retain submitted data under their applicable terms and settings; the operator must review provider policies before enabling processing of sensitive information. Google data is not sold or used for advertising.

Storage and retention

The connector stores OAuth credentials on the operator-controlled assistant host. The current Gmail/Calendar CLI encrypts its stored credentials. Retrieved content may be retained in assistant conversations, task outputs, downloaded attachments, operational logs and operator-created notes. There is no fixed automatic deletion period promised for these artifacts: retention depends on the operator’s settings and task needs. The operator can request review and deletion of retained local artifacts; deletion from external providers is subject to their controls and policies. Revoking OAuth access stops future authorized API access but does not itself delete prior copies or conversations.

Security and account controls

Credentials and private Google content are not published on this informational website. This informational website has no sign-in form or advertising tracker. Cloudflare hosts the site and may inject Web Analytics and email-address protection scripts under the domain’s settings. Cloudflare may process visit and performance telemetry, ordinary request data and security logs. These website features do not provide access to the operator’s Gmail or Calendar content. Access tokens and credentials must not be shared publicly. The account holder can revoke the connector through Google Account security settings and contact the operator to remove locally stored credentials and review retained artifacts.

Google API policy

Hermes Connector’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements. Google user data must not be used to develop, improve or train generalized AI or machine-learning models. The operator must select provider settings and practices consistent with these restrictions.

Changes

Material changes to data use must be reflected in this policy before those uses are introduced. Contact the operator with questions about access, processing or deletion.