Privacy Policy

Google user data the application accesses

After the owner grants permission through Google OAuth, Hermes Calendar may access the following data solely to complete owner-requested tasks:

• Google Calendar: calendars, event details, attendees, reminders, and event metadata.
• Gmail: message content, headers, labels, drafts, and sent messages.
• Google Drive: file names, metadata, contents, and files selected or requested by the owner.
• Google Contacts: contact names and contact details.
• Google Docs and Sheets: document and spreadsheet content selected or requested by the owner.
• Account information: the Google account identity needed to authenticate requests and identify the connected account.

How Google user data is used

Google user data is used only to perform actions the owner explicitly requests, such as listing or creating calendar events, finding or sending email, locating files, reading documents, updating spreadsheets, and retrieving contacts. The data is not used for advertising, profiling, credit decisions, surveillance, or training public or shared machine-learning models.

Storage and retention

OAuth credentials are stored locally on the owner-controlled Hermes Agent host so the application can maintain the authorized connection. Task results may appear in the owner’s private local session history. Hermes Calendar does not operate a separate commercial database of Google user data.

Local credentials and session records are retained until the owner removes them, revokes access, or deletes the local Hermes profile. Temporary working data is retained only as long as needed to complete the requested task or maintain the owner’s local records.

Sharing and disclosure

Hermes Calendar does not sell Google user data. It does not share Google user data with advertisers, data brokers, or unrelated third parties. Data may be sent to Google APIs to perform requested actions and may be processed by the owner’s configured AI service only when necessary to understand and complete that request. Data may also be disclosed when required by law or to protect security and legal rights.

Google API Services User Data Policy

Hermes Calendar’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Google user data is used only to provide or improve the user-facing features requested by the owner.

Security

Reasonable safeguards are used to protect credentials and data, including local owner-controlled storage, restricted file permissions, encrypted HTTPS connections to Google APIs, and access limited to the authorized owner. No method of storage or transmission is guaranteed to be completely secure.

Your controls and deletion rights

The owner can revoke the application’s Google access at any time from the Google Account security permissions page. The owner may also delete the local OAuth token and Hermes profile data. To request help deleting locally stored credentials or task records, contact the developer at the address below.

Children’s privacy

Hermes Calendar is not directed to children and does not knowingly collect personal information from children.

Changes to this policy

This policy may be updated when the application’s features or data practices change. The current version and revision date will remain available on this page.

Contact

Questions or deletion requests may be sent to csrgrado@gmail.com.