Privacy policy

Hermes Google broker is a personal tool run by one individual, its owner, on the owner's own server. This policy says how the app handles Google user data. It applies to the owner's own Google account only.

Who uses the app

Only the owner. The app has no other users and is not offered to the public. The Google account that it connects to belongs to the owner and is used only for this purpose.

What data the app can reach

With the owner's permission, the app can reach the following data of that one Google account:

• Gmail: messages, labels and drafts.
• Google Calendar: the list of calendars and their events.
• Google Drive: files and folders (names, the content of files, and sharing settings).

The app reads or changes this data only when the owner asks the assistant to do something, or when the owner approves an action.

How the data is used

The data is used only to provide the features that the owner sees and requests: finding and reading items, summaries, drafts, and changes that the owner asks for. The data is not used for advertising, is not sold, is not used to build profiles, and is not used to train any general artificial intelligence or machine learning model by the owner or by this app.

Who the data is shared with

• An AI model provider. To write a summary or a draft that the owner asked for, text from the account is sent to an AI model service (Nous Portal and the model companies behind it). The service is used with its privacy mode turned on. The text is sent only for the request that the owner made.
• A messaging service. The assistant answers the owner in a private chat in the Telegram messaging service. Parts of the data can appear in these answers and stay in that chat until the owner deletes them.
• The data is not shared with anyone else. No person other than the owner reads it, except when a person must look at it to fix a security problem or to follow the law.

Where the data is kept

The access tokens that Google issues are kept only on the owner's own server, in a file that only one dedicated service account of that server can read. They are never published. The assistant's working notes and its conversation history may contain parts of the data. They are kept on the owner's own server and in the private chat, until the owner deletes them. Connections to Google and to the other services use encryption in transit. The server is protected by access control, and the owner's approval is needed for changes that cannot be undone.

How access is removed

The owner can remove the app's access at any time on the Google account permissions page (myaccount.google.com/permissions), and can delete the stored tokens on the server. After that the app cannot reach the account. The owner can delete the assistant's copies of data from the server and from the chat at any time.

Google API Services User Data Policy

The use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Changes to this policy

If the way that the app uses Google user data changes, this policy is updated and the owner agrees to the updated policy before the new use starts.

Contact

Questions about this policy or about the data: privacy@fosols.com