Privacy Policy
Hermes Mail Assistant ("the tool") is a personal, single-user application operated by the owner of the Google account it is authorised against. It is not offered to, or usable by, anyone else.
What it accesses
- Gmail message headers: sender, recipient, subject, date and labels.
- Message bodies, only when the owner explicitly asks for a specific message to be read or summarised.
- Message labels, to move mail out of or into the inbox.
No other Google data is requested. The tool does not use Google Calendar, Drive, Contacts, Docs or Sheets, although scopes for those services may be present in the authorisation grant.
How data is handled
- All API calls are made directly from the owner's own computer to Google's servers. There is no intermediary service or relay.
- Message metadata is cached in a local file on the owner's machine for the sole purpose of avoiding repeated API calls.
- Nothing is transmitted to any third party. No analytics, no telemetry, no advertising, no profiling.
- No data is sold, rented, or shared.
- No data is used to train machine-learning models.
Credentials
OAuth credentials and refresh tokens are stored only on the owner's machine,
in files readable only by the owner's user account (mode 0600).
They are never transmitted anywhere except to Google's own token endpoint, as
required to refresh access.
Deletion and retention
The tool never permanently deletes email. Archiving removes the Inbox label only; messages remain in the account and can be restored. Cached metadata and stored credentials can be removed at any time by deleting the local cache directory and token file.
Revoking access
Access may be revoked at any time at myaccount.google.com/permissions, which immediately invalidates the tool's tokens.
Contact
jahumac [at] gmail.com