Privacy Policy — Hermes Alfred
This policy describes a private, single-user integration operated by the domain owner.
Google permissions
The integration requests only these Google OAuth permissions:
https://www.googleapis.com/auth/gmail.readonlyhttps://www.googleapis.com/auth/calendar.readonly
These permissions allow the integration to read Gmail messages and Google Calendar events. They do not allow it to send, edit, delete or label email, or to create, edit, delete or RSVP to calendar events.
How data is used
Google data is used solely to prepare private assistant responses, daily reviews, deadline summaries, schedule-conflict checks and copy-and-paste suggestions. The integration does not sell Google data or use it for advertising.
Processing and storage
Data is processed by the owner’s privately administered Hermes Agent installation and its configured model provider to generate the requested responses. OAuth credentials are stored on the owner-controlled system with restricted file permissions. Public website visitors cannot access the Gmail or Calendar data.
Routine notifications may contain a minimal, low-sensitivity summary through a channel selected by the owner. Raw Gmail and Calendar content is not intentionally retained as long-term assistant memory.
Revoking access
Google access can be revoked through the Google Account permissions page at myaccount.google.com/permissions. The owner can also delete the local OAuth credential from the Hermes installation.
Contact
Questions about this private integration can be directed to support@pennyone.co.uk.