Data practices
Privacy policy
This policy describes Hermes Email, an owner-operated personal Gmail integration, and its informational website at email.hermy.lol. The operator and privacy contact is seabasscampos@gmail.com.
Google data accessed
With the account owner’s explicit Google OAuth authorization, the integration can read account-identifying information, message and thread identifiers, email headers, senders and recipients, subjects, message bodies, mailbox metadata, and attachments. The configured scope is gmail.readonly. Although that scope permits mailbox-wide reading, the integration uses searches and retrievals directed by the owner’s requests.
How data is used
Data is used to provide the owner’s requested email search, retrieval, summarization, document extraction, and personal administrative assistance. The operator does not sell Google user data, use it for advertising or credit decisions, or use it to develop or train generalized AI or machine-learning models.
Processing and sharing
Selected messages, attachment contents, or derived information may be processed by the owner’s configured AI and infrastructure providers, including OpenAI when that provider is selected, to perform the requested assistance. This is not a promise that all email processing stays on one device. Provider processing and retention also depend on the services and account settings chosen by the operator.
The integration does not provide public access to the mailbox. It does not share email content with other recipients merely because they visit this site. An owner-directed disclosure outside the processing needed for these features requires separate authorization for that task.
Storage, security, and retention
OAuth tokens, downloaded attachments, extracted information, generated work products, and relevant agent conversation or operational records may be stored in the operator’s private computing environment. These records may include email content. They are retained while needed for the requested work, recordkeeping, troubleshooting, or owner-directed follow-up; there is no automatic fixed deletion interval promised by this policy.
Google API connections use HTTPS. Authorization material is kept outside these public website files. Access is limited to the operator and the systems and service providers used to deliver the requested features. No system can guarantee absolute security.
Your controls, revocation, and deletion
The owner can disconnect Hermes Email from Google Account third-party connections. Revocation stops future authorized API access; it does not by itself erase previously retrieved files or conversation records.
To request removal of stored tokens, messages, attachments, or derived records, contact the operator at seabasscampos@gmail.com, identifying the data to remove. The operator can delete active copies under their control and address provider-held copies through the relevant provider controls; backups and provider retention may follow separate schedules.
Google API Services User Data Policy
Hermes Email’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
This public website
This informational site contains no mailbox interface, analytics scripts, advertising, credential form, or application cookies. Cloudflare delivers and secures the site and may process ordinary technical request information such as IP address, request time, and browser headers. No Google OAuth tokens or private email documents are served by this website.
Changes and contact
This notice will be updated if the integration’s data practices change. Questions or deletion requests can be sent to seabasscampos@gmail.com.