Privacy notice

Operator and purpose

Mike Zhou operates Mike Ops Hermes as a private business administration tool. Questions about this notice or data handling may be sent to mike@sweetcosta.com.

Google data accessed

For an authorized Gmail account, the app may access message headers, sender and recipient addresses, subjects, message content, labels, and attachments needed for a requested task. Its Gmail permission also supports composing and sending messages and managing mailbox contents. The present authorization does not grant access to Google Calendar, Drive, Docs, Sheets, or Contacts.

Use and processing

Google data is used to provide requested email assistance, including search, summaries, response preparation, and specifically authorized mailbox actions. The current AI processing runs locally on the operator's Mac through Ollama. Google processes the API requests needed to retrieve or act on Gmail data.

The app will not use Google user data for advertising, sale, or training a generalized AI model. Its use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Storage and retention

OAuth credentials are stored in the local Hermes profile with restricted file permissions. Email content returned to Hermes may also appear in local conversation history, logs, or task artifacts. Local storage is not automatically erased when a conversation ends or when Google access is revoked. The operator reviews and removes retained material when it is no longer needed for the task or applicable business recordkeeping obligations.

Sharing and control

Google data will not be sent to a separate cloud AI provider or messaging destination unless the operator explicitly authorizes that use and updates the disclosed processing practices where needed. Emails are delivered to their recipients only when sending is authorized. This notice does not assert that every connected tool or optional plugin processes data locally.

The operator can revoke the app's Google access through the Google Account connections page. Revocation stops future authorized access but does not erase data already stored locally. Requests for deletion of local copies can be directed to the contact address above, subject to applicable recordkeeping obligations.