hermes privacy policy

last updated: september 5, 2026

#overview

hermes is vedant agarwal's personal oauth application that connects his desktop chief-of-staff agent (ivan) with google workspace apis. this is personal tooling, not a commercial product. vedant is the only user.

#what data hermes accesses

hermes accesses the following google workspace data:

gmail

read, send, compose, and modify messages as needed for email triage and replies authorized by vedant. this includes reading message content, sender/recipient information, timestamps, labels, and attachments.

google calendar

read and write calendar events. this includes viewing event details (title, time, location, attendees) and creating or modifying events when vedant requests it.

google drive

read and write files that vedant asks about or wants to work with. this includes viewing file content, metadata, and sharing settings, as well as creating or modifying files.

#how data is used

all data access is for the sole purpose of operating vedant's personal assistant. specifically:

to enable the assistant to respond to vedant's requests and commands
to perform tasks vedant explicitly authorizes (e.g., sending an email draft, scheduling a meeting)
to provide context for assistant workflows (e.g., checking calendar availability before suggesting a meeting time)

#data storage and security

oauth access tokens are stored locally on vedant's private agent machine. no google data is permanently stored, shared with third parties, or used for any purpose beyond the immediate assistant workflow.

data is never sold, never shared with third parties (except as required to call google apis), and never used for advertising, analytics, or any commercial purpose.

#data retention

hermes does not retain google data. all interactions with google workspace apis are transient—data is accessed only as needed to fulfill vedant's request and is not stored permanently.

#third-party sharing

hermes does not share data with any third parties. the only external service hermes communicates with is google's apis to perform the authorized actions.

#revoking access

vedant can revoke hermes's access to google workspace at any time through google account settings. revoking access immediately prevents hermes from accessing google data.

#contact

for questions about this privacy policy, data handling, or hermes, contact vedant agarwal at [email protected].