Privacy Policy
Hermes Personal Assistant is a personal assistant for its owner, used through a private Telegram conversation. This policy describes its Google Calendar and Gmail features as of October 17, 2026.
Information processed and purpose
When the owner asks, Hermes reads event details and availability from the owner's selected Google Calendars and searches or reads Gmail messages to answer the request or prepare an on-demand briefing. Gmail searches default to unread messages in the inbox unless the owner specifies a query. Briefings can include at most five concise email highlights. Hermes does not poll or schedule email checks.
Calendar support includes event and availability reads, explicitly requested creation of a fully specified individual timed event, and individual event/occurrence edits or deletion only after a full preview and confirmation in a later owner turn. Gmail supports search and reading, explicit download of a specifically requested attachment, and a separate preview/later-confirmation workflow for marking selected eligible routine promotional/newsletter messages as read. No email sending, replying, drafting, archiving, deletion, trashing, or other label changes are exposed. Attachments are not automatically downloaded, opened, executed, or extracted. The owner must explicitly request any particular attachment download.
Processing and sharing
Message and calendar content is interpreted by a locally run Qwen model; Hermes does not send private content to cloud AI helpers or use it for web research. This does not mean all data processing is local: Google processes data for its services and Telegram processes conversation data to deliver messages. The owner should review those providers' own privacy terms.
Google account authorization is configured locally and Gmail and Calendar use the same account. The Gmail grant permits broader actions at Google account level than the assistant's exposed workflow, including sending and trashing mail. The workflow is not credential-level containment, and no claim is made that the credential itself is incapable of other actions. Google Calendar access is restricted in the workflow to the owner's selected calendars; selection and confirmation are workflow controls.
The assistant does not sell personal data, serve ads, or use private mail/calendar content to train models. The owner can explicitly download an individual attachment; Hermes does not provide a bulk mailbox export.
Retention and owner control
The owner can revoke Google's access for Hermes at Google Account connections. Revocation stops future authorized access but does not automatically delete locally retained conversation history, tokens, downloaded files, operation previews or receipts, or backups. The owner can remove these individual records and files through local maintenance of the owner's Hermes data and storage. Removing a local copy does not delete or otherwise change the corresponding mail in Gmail. This page does not promise a particular automatic deletion period or backup-erasure schedule.
Website information
This is a static site hosted through GitHub Pages. GitHub may process request information, such as IP addresses, under its own practices. The pages contain no forms, JavaScript, analytics, cookies, or external assets. See GitHub's Privacy Statement.
Google policies
Hermes Personal Assistant's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements. Google Workspace API data handling is also subject to the Google Workspace API User Data and Developer Policy.
- Google API Services User Data Policy, including Limited Use requirements
- Google Workspace API User Data and Developer Policy
Contact
For questions, use the project's public GitHub issues. Issues are public: do not include private mail or calendar details, personal data, credentials, or authorization codes.