Privacy Policy — Hermes Personal Integrations
Privacy Policy for Hermes Personal Integrations
Effective date: October 11, 2026
Hermes Personal Integrations is a private productivity application operated by Andrew King. This policy explains how the application accesses, uses, stores, and shares information received through Google APIs.
Information accessed
Depending on the permissions granted by the authorized user, Hermes Personal Integrations may access:
- Gmail messages, message metadata, drafts, and labels
- Google Calendar events and calendar information
- Google Drive files and file metadata
- Google Docs and Google Sheets content
- Google Contacts
- Google Tasks and task lists
- Basic Google Account information needed to identify the authorized account
The application requests only the Google permissions needed for its enabled productivity functions.
How information is used
Google user data is used only to provide user-facing functions requested by the authorized user, including:
- Finding, reading, classifying, and organizing information
- Preparing email drafts and other requested content
- Managing calendars, tasks, documents, spreadsheets, contacts, and files
- Maintaining continuity for the authorized user's personal AI assistants
The application does not use Google user data for advertising, marketing, credit decisions, surveillance, or data brokerage.
Artificial intelligence
Authorized Google data may be processed by AI services solely to provide the specific personalized functions requested by the authorized user.
Google Workspace data is not used to create, train, or improve generalized or non-personalized artificial-intelligence or machine-learning models.
Storage and security
OAuth credentials and application data are stored on systems controlled by Andrew King. Reasonable technical safeguards are used to protect credentials and stored information from unauthorized access.
Data may be retained only as necessary to provide the requested functions, preserve the authorized user's records, maintain application continuity, or comply with legal obligations.
Sharing and transfer
Google user data is not sold.
Google user data is not shared with advertisers, data brokers, information resellers, or unrelated third parties.
Data may be transmitted to service providers, including AI-model and infrastructure providers, only when necessary to perform a function requested by the authorized user. Such processing is limited to providing that requested function and is subject to the applicable service provider's contractual and security protections.
Data may also be disclosed when required by law or when necessary to investigate a security incident.
Google API Limited Use
Hermes Personal Integrations' use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Human access
Google user data is accessed only by the authorized user or when human access is necessary to provide a requested function, resolve a technical or security problem, comply with law, or act with the authorized user's explicit consent.
Revoking access and deleting data
The authorized user may revoke the application's Google access at any time through the security settings of the relevant Google Account.
The authorized user may request deletion of locally stored Google-derived data or OAuth credentials by contacting Andrew King at adking@gmail.com.
Revoking access prevents future API access. Locally stored credentials and application data will be deleted upon request unless retention is required by law or explicitly requested by the authorized user.
Changes to this policy
This policy may be updated if the application's functionality or data practices change. The current version will remain available at this URL, with its effective date shown above.
Contact
Questions about this policy or the application's use of Google data may be sent to:
Andrew King
adking@gmail.com