1. Application and operator
Hermes Gmail Integration is a personal Google OAuth application used to connect Gmail to Hermes. This policy concerns that integration and this information website.
OWNER TO CONFIRM: The operator’s name and a monitored privacy contact email address. No contact address has yet been supplied.
2. Gmail access and purpose
The Gmail skill requests https://www.googleapis.com/auth/gmail.readonly to read Gmail information for the user’s requests in Hermes. This scope permits viewing email messages and settings. It does not permit sending, deleting, archiving, changing labels on messages, marking messages as read, or otherwise modifying messages.
Read-only does not mean access is limited to a single selected message. The OAuth permission allows broader Gmail reading; what Hermes retrieves depends on its implementation and the request.
OWNER TO CONFIRM: The exact data actually retrieved, including message bodies, headers, addresses, attachments or settings, and the specific enabled uses.
3. External AI processing and sharing
Hermes may send selected email content to external AI inference providers to process requests. This may include personal information contained in those emails. It would therefore be inaccurate to say that all email data stays local.
OWNER TO CONFIRM: Which providers and intermediaries receive data; what content is sent and when; processing locations; applicable privacy policy links; provider retention, logging, human access and model-training settings; and any other sharing or disclosure. No claim that data is never shared, sold or used for training is made without verification.
4. Storage, retention and security
Storage and retention depend on the Hermes setup and any external providers used. Confirmed retention periods and deletion procedures have not been supplied.
OWNER TO CONFIRM: Where OAuth tokens, email content, prompts, responses, conversation history, logs, caches and backups are stored; who can access them; security measures; how long each is kept; and how deletion is performed, including provider-held copies.
5. Disconnecting Gmail and deleting data
You can review and remove the application’s Google Account connection through Google Account connections. Removing access does not itself delete information already retrieved by Hermes or sent to external providers.
OWNER TO CONFIRM: A usable contact route and procedure for deleting previously stored data, including any limits affecting backups or provider-held data.
6. This information website
The supplied website files contain no forms, analytics scripts, cookies or Gmail sign-in code. They do not read your inbox. The site is prepared for hosting on Cloudflare Pages.
OWNER TO CONFIRM: The deployed hosting configuration and any hosting logs, analytics, cookies or additional services. The absence of tracking code in these files does not establish that the hosting provider collects no request data.
7. Policy updates
This draft should be updated when the operator confirms the outstanding details or changes the integration’s data handling. The date above identifies preparation of this draft, not an asserted effective date.