Hermes Agent — last updated 7 November 2026
Hermes Agent is a private, self-hosted software assistant with a single user: the person who installed and operates it. There are no other users, no sign-up, and no service offered to the public. The operator named at the bottom is the only data controller.
When the operator authorises the tool through Google's OAuth consent screen, it may access:
Access is limited to what the operator asks for at the time. No other Google services, and no other people's data, are accessed.
All data stays on computing hardware controlled by the operator. Google OAuth tokens are stored on that machine with file permissions restricted to the operator's account. No copy of Google user data is uploaded to a third-party service, sold, or shared.
The assistant uses large-language-model APIs to interpret the operator's instructions and to draft text. Where a task requires it, excerpts of the relevant content may be sent to the model provider that the operator has configured, solely to complete that task. No Google user data is used for advertising, profiling, or training of third-party models.
Data is retained on the operator's machine for as long as the operator keeps it, and is deleted when the operator deletes it. Access tokens can be revoked at any time, immediately ending the tool's access to the Google account.
The operator can revoke access at any time at myaccount.google.com/permissions. Deleting the locally stored token on the operator's machine removes the remaining credential.
No data is sold, rented, or used for advertising. No advertising or analytics services are integrated.
If this policy changes, the updated version will be published at this address with a new date. Because the tool has one user, the operator is notified directly.
Questions about this policy: muresandanconstantin@gmail.com