Privacy Policy

Hermes · Last updated 26 September 2026

Hermes is a personal mail assistant used by exactly one person, its owner (ansonpu84@gmail.com). It is not offered to the public. This policy explains what Google user data Hermes accesses and what it does with it.

Data Hermes accesses

With the owner's explicit consent through Google's sign-in screen, Hermes requests these Gmail permissions for the owner's own mailbox only:

gmail.readonly — to read message senders, subjects and contents so they can be sorted and summarised.
gmail.modify — to apply labels and archive messages out of the inbox.
gmail.send — only to send unsubscribe requests the owner has approved.
gmail.settings.basic — to create mail filters that sort future mail into labels.

How the data is used

To file the owner's mail into labels according to rules the owner defines.
To produce a daily summary of mail that needs the owner's attention, delivered only to the owner.
To detect urgent messages (for example payment failures or security alerts) and notify the owner.

Hermes never permanently deletes mail, and never sends mail on the owner's behalf other than unsubscribe requests the owner has approved.

Storage and protection

Hermes runs on the owner's own computer. The access token and any working data (such as message identifiers written to a local log so changes can be undone) are stored only on that computer, protected by that computer's user account. No mail data is stored on any server operated by Hermes — there is none. Connections to Google use Google's encrypted (HTTPS) APIs.

Retention and deletion

Mail itself stays in the owner's Gmail account; Hermes keeps no copy of message contents. Local change logs contain only message identifiers and label names, are kept so a change can be undone, and can be deleted by the owner at any time. The access token is kept until the owner revokes access; revoking it (below) makes it permanently unusable.

Sharing

Hermes does not sell, rent, share or transfer Google user data to any third party. Mail summaries and alerts are delivered only to the owner. Google user data is not used for advertising, and is not used to develop, improve or train generalised or non-personalised artificial intelligence or machine learning models.

Hermes's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Revoking access

The owner can revoke Hermes's access at any time at myaccount.google.com/permissions. Revoking access stops all further reading or changes; locally stored data can be deleted by removing Hermes from the owner's computer.

Contact

Questions about this policy: ansonpu84@gmail.com.