Privacy Policy

Hermes Assistant · Last updated: 4 October 2026

Hermes Assistant ("the Application") is a private, single-user automation tool operated by its owner ("the Operator"). This policy explains what the Application accesses and how that information is handled.

1. Single user

The Application has one user: the Operator. It is not distributed, published, or made available to any other person, and it does not create accounts for or collect information from any third party.

2. Information the Application accesses

With the Operator's explicit authorisation via Google OAuth, the Application may access the following data belonging to the Operator:

• Gmail — read, send and modify messages in order to locate its own report threads and deliver scheduled reports.
• Google Drive, Sheets and Docs — read and write files used to generate those reports.
• Google Calendar — read the Operator's own calendars for scheduling context.
• Contacts — read only, to resolve the Operator's own email addresses.

3. How information is used

Access is used solely to generate and deliver the Operator's own scheduled reports and notifications. The Application does not perform analytics, profiling, advertising, marketing, or automated decision-making about any person.

4. Sharing and disclosure

The Application does not sell, rent, trade, or share any accessed data with any third party. No data is transferred to external servers other than the Google APIs required to perform the functions above. Google's own handling of data is governed by the Google Privacy Policy.

5. Storage and retention

Credentials and any cached report data are stored locally on the Operator's own machine and are not uploaded to any third-party service. Data is retained only as long as needed to produce the Operator's reports, and may be deleted at any time by the Operator.

6. Security

Access tokens are stored on the Operator's local machine with restricted file permissions. The Operator may revoke the Application's access at any time via their Google Account permissions page at myaccount.google.com/permissions.

7. Limited Use disclosure

The Application's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

8. Children

The Application is not directed at children and does not knowingly collect information from anyone under the age of 13.

9. Changes

Any changes to this policy will be published on this page with an updated revision date.

10. Contact

Questions about this policy: homanlau@gmail.com