Hermes Agent — internal automation application. Last updated: 29 October 2026.
This policy covers the private automation application operated by the owner of the Google account that authorises it. The application has exactly one user: its owner. It is not a public service and does not accept registrations.
Only after the owner grants permission through Google's OAuth consent screen, and only within the scopes granted, the application may access:
No other Google data, and no data from any other account, is accessed.
Accessed data is used solely to carry out the task the owner requested at the time. It is not used for advertising, profiling, analytics, model training, or any secondary purpose.
Working copies of documents may be stored temporarily on the owner's own infrastructure while a task is carried out, and are deleted when no longer needed. OAuth credentials (an access token and refresh token) are stored locally on the owner's own system, protected by file permissions, and are never transmitted to any third party.
No data is sold, rented, published or shared with any third party. No sub-processors are used. Documents are not made public. Files created in the owner's Drive inherit the owner's own sharing settings, which the owner controls.
Credentials are held only on the owner's system. Access is limited to the owner's own Google account. The owner can revoke access at any time at myaccount.google.com/permissions, which immediately invalidates the stored credentials.
The application is not directed at children and has no users other than its owner.
Any change to this policy will be published on this page with a new date.
Questions about this policy: casabauhinia@gmail.com