Privacy & personal integration.
Who this notice covers
Tyler J. Bass operates this portfolio and a private, personal-use installation of Hermes. This is not the privacy policy of the Hermes software project or other installations. This website does not offer Google sign-in or access to the private assistant.
Website visits and email
The site contains no advertising, analytics scripts, contact forms, or embedded Google sign-in. Hosting is intended for Cloudflare Pages. When served by Cloudflare, network request information such as IP addresses, requested URLs, and browser information may be processed to deliver and protect the site, under Cloudflare’s privacy policy. No claim is made that the hosting provider keeps no logs.
If you email the contact address below, your address, message, and any attachments are processed through Proton Mail to receive and respond to your inquiry. See Proton Mail’s privacy policy. Please do not email passwords, recovery codes, or other secrets.
Google information and its use
The personal Hermes integration accesses the account owner’s authorized Google data to support email review and drafting, inbox organization, calendar planning, and file or document tasks. Depending on the task and granted permissions, this includes email content and metadata, labels and filters, calendar and event details, Drive files, documents, and spreadsheets.
Authorized operations can include creating drafts, changing labels or filters, moving mail to spam or trash, editing calendar events, and creating or editing files and documents. The current Gmail helper blocks sending and permanent mail deletion at the application layer; the OAuth permissions themselves are broader. The public website cannot perform these operations.
Processing and storage
This is not an exclusively on-device assistant. Google information included in requests or responses can be processed by configured remote AI providers. Current configuration includes OpenAI and xAI model routes and Honcho memory integration. Conversation content and derived memories may be processed by those services to provide responses and continuity. Provider processing is subject to the applicable account settings and terms; this notice does not promise zero retention or make a blanket guarantee about provider model-training practices.
Data and derived summaries may also persist in private conversation history, notes, operational files, logs, memory services, and backups. There is no single verified automatic deletion period across these stores. Removing a conversation or revoking Google access should not be assumed to remove every derived note, provider record, or backup.
Access, revocation, and deletion requests
Google authorization uses OAuth rather than asking the website for a Google password. The account owner can remove the connection through Google Account connections. This withdraws authorization for future access; it does not automatically erase previously obtained data.
For a question or deletion request relating to data held by this personal installation, email the contact below. Requests require review of the relevant records and any identity-verification needs. Immediate removal from all backups or third-party systems is not guaranteed; provider-held data may require the provider’s own privacy process.
Contact and changes
Contact [email protected] about this site or personal integration. This notice should be updated when its data-handling practices change.