How this integration handles data
This policy covers the personal Hermes installation operated by Asher Aldis and its Google Workspace connection. It does not describe every installation of Hermes Agent or replace Google's or a processing provider's privacy policies.
Data accessed
Depending on the permissions granted and the task, the integration can access Gmail message headers, bodies, attachments, labels, and recipients; Calendar events and details; Drive files and metadata; Docs and Sheets content; and read-only Google contact information. OAuth access and refresh tokens are also stored to maintain the connection. Broad granted permissions can support reading, sending, modifying, creating, or deleting data, but changes are performed only within the account owner's authorization.
Why data is used
Data is used to deliver requested personal-assistant features: searching and summarizing email, drafting and sending authorized communications, managing calendars, working with documents and spreadsheets, looking up recipients, and running explicitly configured automations. Relevant results and selected preferences may become part of the assistant's context or local memory to support those features.
AI processing and sharing
Relevant Google data may be sent to the configured AI inference provider to fulfill a task. The current main model connection uses OpenAI; other configured AI or tool services may be used when needed. Their processing and retention are governed by the applicable account terms and settings. This policy does not promise that every provider retains no data.
When requested or covered by an explicit automation, messages, summaries, attachments, and event details may be delivered through configured messaging services such as Discord or to recipients chosen by the account owner. Those recipients and services may retain their own copies. Data may also be disclosed when legally required or reasonably necessary to address a security incident.
The operator does not sell Google user data or use it for advertising, data brokerage, credit scoring, or independently training general-purpose or shared AI models. Google data is intended to be processed by AI services only for the specific assistant features authorized by the account owner, not submitted for general-purpose model training. Relevant service settings must be kept consistent with that limitation.
Local storage and retention
OAuth credentials, conversation history, task logs, selected memory, downloaded files, cached content, and automation deduplication records may be stored on the operator's server. There is no single automatic deletion period covering all of these records. Some caches are temporary; history, downloaded files, memory, logs, and automation records can remain until the operator removes them. Backups and copies held by providers or message recipients may have separate retention periods.
Security and human access
Public web access uses HTTPS. OAuth credentials are stored separately from these public pages and should never be pasted into this website. The operator administers the server and may access stored task data for requested features, maintenance, troubleshooting, and security. No system can guarantee complete security.
Revoking access and requesting deletion
Google access can be revoked at Google Account third-party connections. Revocation stops subsequent authorized Google API access but does not automatically delete previously stored data or copies already delivered to recipients.
Contact asheraldis@gmail.com to request deletion of locally held Google-derived content, local memory, or OAuth credentials. Third-party copies and independently required records may need separate handling; the operator will explain any applicable limitations.
Google API data commitments
This integration's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements. The stated purpose is a personal productivity assistant, not resale or unrelated secondary exploitation of Google data.
This public website
These information pages do not contain advertising, analytics scripts, account-registration forms, or embedded third-party widgets. They do not set application cookies. Ordinary network or server security records may include request information such as IP address and time.
Changes and contact
Policy changes will be posted here with an updated date. Material changes in Google data use require appropriate notice and authorization. Operator: Asher Aldis. Email: asheraldis@gmail.com.