Privacy policy

This policy applies to the privately operated Hermes Platform integration managed by Tzvi (Mark) Koegel. It describes this deployment, not every product named Hermes.

Google data accessed and used

Depending on granted permissions and the workflow, the assistant accesses Gmail message content, metadata and attachments; calendar events and calendar lists; task lists and tasks; Drive files and metadata; Google Docs and Sheets content; and contact information. It uses these to answer the owner, summarize information, maintain reminders and working context, and carry out owner-authorized email, calendar, task, and document actions. Enabling an API does not mean all account content is copied.

Storage and retention

OAuth access and refresh tokens are stored on owner-controlled systems so scheduled jobs can work without repeated sign-in. Working context, extracted records, conversation history, logs and backups may also retain selected Google data on owner-controlled computers and local-network servers. Retention varies by workflow; there is no single automatic deletion period for every record or backup.

AI processing and sharing

Relevant email, event, task, contact, or document content may be sent to the configured external AI inference providers to deliver the requested assistant features. Connected services may receive information when the owner requests or configures a workflow, such as a reminder, message, or note. Processing depends on the active configuration and the receiving provider terms. The integration is not intended to sell Google user data, use it for advertising, or use it to train a generalized AI model. The operator must select providers and settings consistent with the Google API Services User Data Policy, including its Limited Use requirements. This page is a disclosure, not a claim of a completed third-party security audit.

Security and public website

Google authorization uses OAuth rather than collecting Google passwords. Credentials are kept off this public website. Public pages contain no account data and provide no login to the private assistant. Web-server access logs may record request time, IP address and browser information. These pages set no application cookies and load no analytics or advertising scripts. No system can guarantee absolute security.

Your control and deletion

The account owner can stop scheduled jobs and revoke access at Google Account connections. Revocation stops future authorized access but does not automatically delete previously saved context, logs, backups, or information already sent to another service. To request deletion or assistance, contact magykmaster@gmail.com. The operator can remove local credentials and retained records; external-service copies are subject to those services and their deletion procedures.

Scope of use and changes

This is a personal-use integration for accounts authorized by the operator, not a public consumer service. Material changes to data use must be reflected here and, where appropriate, explained before additional access is requested.