Privacy Policy
Hermes Dual GWS · Last updated: October 14, 2026
What Hermes Dual GWS is
Hermes Dual GWS is a private, single-user Google OAuth integration. It connects my personal and work Google accounts to my self-hosted Hermes AI assistant. It is not offered to the public and has no users other than me.
Data it accesses
With my authorization, Hermes Dual GWS can access the following data from my own Google accounts:
- Google account identity, such as my name and email address.
- Gmail: email messages, threads, labels, and drafts.
- Google Calendar: calendars and events.
- Google Drive: files and their metadata and contents.
How the data is used
Data is accessed only to carry out my own instructions. Depending on what I ask, Hermes Dual GWS may read data, send email, and create, change, or delete emails, events, and files in my accounts. It is not used for advertising, and it is not sold or shared with anyone for their own purposes.
Where credentials and data are stored
OAuth credentials are stored on my self-hosted machine. Data retrieved from Google is handled by my self-hosted Hermes setup. I do not state any fixed retention period, and I make no specific encryption guarantee here.
Third-party AI provider
Content retrieved from Google, such as email text, calendar details, or file contents, may be sent to the third-party AI provider I have configured for Hermes, so that it can be processed to carry out my requests. That provider's own terms and privacy practices apply to what it receives. I make no statement here about how any provider retains or uses data, including for training.
This website
This website is informational only. It does not perform Google authorization and does not receive OAuth tokens or any Google data. It has no login, no analytics or tracking, and sets no cookies.
Revoking access and deleting data
I can revoke access at any time in each Google account under Google Account → Security → Third-party connections. Revoking stops future access. It does not automatically delete data that was already retrieved. Stored credentials and any retained data on my self-hosted machine, and anything held by my configured AI provider, must be deleted separately.
Changes
I may update this policy as the integration changes. The date above shows the latest revision.