Privacy Policy
Hermes ServerOps · effective 14 November 2026
Hermes ServerOps is a private automation tool used by a single owner. This policy describes exactly what Google user data it accesses, why, where it is stored, and how it is deleted.
1. Data accessed
| Scope | Purpose |
|---|---|
| Gmail — read, modify | Read incoming messages to summarise, route, or alert the owner; apply labels. |
| Gmail — send | Send notifications and scheduled digests from the owner's own address. |
| Google Calendar | Read events to build schedules and meeting summaries; create or update events on the owner's instruction. |
| Google Drive | Read and write files belonging to the owner for the owner's own projects. |
| Google Sheets | Read and update spreadsheets that track the owner's projects. |
| Google Docs | Read and append document content the owner is working on. |
| Contacts (read-only) | Resolve names and addresses when composing mail. |
2. Where data is stored
Message content, file content, and derived summaries are processed and stored only on the owner's own computer. OAuth tokens are stored locally on that machine and are never transmitted to any third party. No cloud database, analytics service, or advertising network receives Google user data.
3. Sharing
No Google user data is sold, rented, transferred, or disclosed to third parties. Data leaves the owner's machine only in the form of mail the owner has asked the tool to send, addressed to recipients the owner specifies. No humans read the data except the owner.
4. Use of AI models
When summarising or drafting, selected text may be sent to the language-model provider configured by the owner, under that provider's API terms. It is not used to train models by this application, and no Google user data is retained by the application for any purpose beyond the task requested.
5. Limited Use
Hermes ServerOps' use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Data is used only to provide the features described above, and only for the account that authorized the application.
6. Retention and deletion
Data is retained on the owner's machine only as long as it is useful for the task, and local copies can be deleted at any time. Revoking the application's access at myaccount.google.com/permissions immediately stops all further access; the stored OAuth token becomes unusable. To request deletion of any retained data, write to the address below.