Last updated: 6 November 2026 · 最后更新：2026-11-06
This policy covers Hermes Agent ("the application"), a private single-user command-line tool operated by its owner on the owner's own computer. The application accesses Google user data only for the Google Account that has explicitly granted it OAuth consent, and only on that owner's instruction.
With the owner's consent, the application may access: Gmail messages and attachments; Google Drive files and metadata; Google Calendar events; Google Sheets and Google Docs content; and the owner's Google Contacts (read-only). Access is limited to the scopes listed on the Google consent screen and to what a given task requires.
Data is used solely to carry out the owner's requests inside the owner's own terminal session — for example summarising a message, locating a file, drafting a reply, or creating a calendar event. Data is not sold, rented, or shared with third parties, and is not used for advertising, profiling, or training machine-learning models by the application itself.
OAuth credentials (access and refresh tokens) are stored locally on the owner's computer at ~/.hermes/google_token.json with file permissions restricted to the owner (0600). Messages, files and calendar data are read on demand and are not copied into any application-operated server or database; any temporary working files stay on the owner's own machine. The assistant's language model may process the content of a specific item only while performing the requested task.
No Google user data is retained beyond the working session except cached tokens needed to keep the connection alive. The owner can delete all stored credentials at any time by removing ~/.hermes/google_token.json (or running the setup script with --revoke), and can revoke the application's access at any time at myaccount.google.com/permissions. Revocation immediately ends the application's ability to access the account.
The application runs locally under the owner's own operating-system account, communicates with Google over HTTPS, and does not expose Google data through any network service. Credentials never leave the owner's machine.
Hermes Agent's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Questions about this policy: privacy@jeprivacy.com
本应用为账户所有者本机运行的单用户工具，仅在所有者授权并指示时访问其 Gmail、Drive、日历、表格、文档与联系人数据；数据仅用于完成该指示，不出售、不共享给第三方、不用于广告或训练模型。OAuth 凭据仅存于本机 ~/.hermes/google_token.json（0600），可随时删除或在 Google 账户权限页撤销授权。使用遵循 Google API 服务用户数据政策（含 Limited Use 要求）。