Privacy Policy — Hermes Agent
Last updated: October 20, 2026
Hermes Agent ("the App") is a private, personal-use automation tool operated by Chance Starseeker. It is not offered to the public and has no users other than its owner. This policy explains how the App handles Google user data.
What Google data the App accesses
When authorized, the App may access the following data from the Google Account that granted permission:
**Gmail** — read messages, modify labels and read state, and send messages on the account owner's behalf.
**Google Calendar** — read and create calendar events.
**Google Contacts** — read the contact list. Read-only.
**Google Sheets** — read and write spreadsheet content.
e data is used
Data is used solely to carry out tasks the account owner explicitly requests — for example, summarizing unread mail, creating a calendar event, or writing a row to a spreadsheet. The App does not read Google data for advertising, profiling, or any purpose unrelated to those requests.
How the data is stored and shared
**Local storage only.** OAuth credentials (including the refresh token) and any cached data are stored on the account owner's own device. The App has no backend server and transmits no Google user data to any third party.
**No sharing.** Google user data is never sold, rented, transferred, or disclosed to any third party.
**No human review.** No person reads the content of the account owner's Gmail or other Google data.
**No advertising.** The App contains no advertising and does not use Google user data to serve ads.
Limited Use disclosure
The App's use of information received from Google APIs adheres to the [Google API Services User Data Policy](https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements. Specifically, Google user data is not used to develop, improve, or train generalized artificial intelligence or machine learning models.
Retention and deletion
Data is retained only as long as needed to perform the requested tasks. The account owner may delete all stored credentials and cached data at any time by revoking access (see below) and removing the local credential files from their device.
Revoking access
Access can be revoked at any time at [https://myaccount.google.com/permissions](https://myaccount.google.com/permissions) — select "Hermes Agent" and choose **Remove access**. Revoking access immediately stops all further use of the data.
Contact
Questions about this policy: chancestarseeker@gmail.com