Privacy Policy

This policy explains how Hermes Personal Assistant, a private single-user application operated by Gijs Vanderhoydonk, accesses and processes Google user data.

Google data accessed

After the owner grants OAuth consent, the application may access Gmail messages and labels; Google Calendar events; Google Drive files and metadata; Google Docs and Sheets content; and Google Contacts. It may send email or modify authorised data only when needed for a request made by the owner.

How data is used

Google user data is used solely to provide the personal-assistant functions described on the homepage. It is not used for advertising, profiling, sale, or unrelated purposes. Outbound email requires explicit interactive approval for the final message.

Processing and disclosure

The assistant runs on a privately administered server. Relevant content may be processed by the AI provider configured by the owner—currently OpenAI—only to perform the owner's requested task. Data is otherwise disclosed only when necessary to provide the requested service, when the owner deliberately sends or shares it, or when required by law.

Cloudflare serves this public information site and may process ordinary web-request metadata. This site itself receives no Google user data and uses no analytics, advertising trackers, forms or cookies.

Storage and retention

OAuth credentials are stored on the private server with restricted file permissions until revoked or deleted. Operational chat sessions are normally retained for no more than 30 days. Information deliberately saved as assistant memory remains until the owner removes it. Google content is not copied into a separate commercial dataset.

Security and control

Access is restricted to the owner, the server is not exposed as a public application, and sensitive actions use approval controls. The owner can revoke Google access at any time from the Google Account permissions page and can delete locally stored credentials and retained data.

Google API policy

Use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

Contact

Privacy questions or deletion requests can be sent to gijs.vanderhoydonk@gmail.com.