Privacy Policy

Effective: June 25, 2026

This application ("Hermes Agent") is a personal automation tool used exclusively by its owner. This policy describes what limited data the application accesses and how it is handled.

Data Access

When authorized, Hermes Agent accesses the following Google user data via OAuth 2.0:

• Google Calendar — Read events for daily briefing generation and schedule management.
• Gmail — Read email for inbox triage and automated filtering. Send email only when explicitly directed by the user.
• Google Drive — Read documents and spreadsheets for data processing tasks.

Data Storage

All accessed data is processed in memory and stored only on the owner's private infrastructure in a local home lab. No data is transmitted to third parties, used for training, or retained beyond what is necessary for the application's operation.

Data Sharing

Hermes Agent does not sell, share, or transmit user data to any third party. The application operates entirely on the owner's private infrastructure with no external data processing.

Security

OAuth 2.0 tokens are stored encrypted on the owner's private server. API access is restricted to the minimum scopes required for the application's functionality.

Changes

This policy may be updated as the application evolves. Changes will be reflected at this URL.

Contact

For questions about this policy or data practices: github.com/gregt08