LAST UPDATED · NOVEMBER 7, 2026
Privacy policy
This policy describes the personal Hermes VPS deployment operated by Chad Maxey and its use of Google user data.
Access and purpose
With explicit account consent, the application can access Gmail message content, headers and labels; calendar entries; Drive files; Docs and Sheets content; and contact information, according to the permissions granted. It uses relevant data to perform the operator’s requested personal-assistance workflows, including summaries, triage, calendar review, research and document work.
The integration may have broader technical permissions than a particular scheduled task is authorized to exercise. Automated triage does not authorize sending messages, changing calendar events, or permanently deleting mail.
Processing and service providers
The assistant runs on a Hostinger VPS. Relevant content supplied to an AI task may be transmitted to configured model providers and routing services, including OpenAI, Nous Research or OpenRouter when selected. Telegram may receive requested summaries and alerts when selected as the delivery channel. Provider selection and the amount of context sent depend on the task and configuration.
These services process information under their applicable terms and data practices. This policy does not claim that processing stays on the user’s laptop, that all providers have identical retention rules, or that provider-side zero retention has been independently verified. Sensitive content should not be supplied to a workflow unless its processing and delivery choices are acceptable to the operator.
Limits on use
The operator does not sell Google user data, use it for advertising, or use it to develop, improve or train generalized artificial-intelligence or machine-learning models. Access is for the specific personal-assistance purposes described here. Google user data is not published on this website.
The use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements. This statement is not a claim of Google verification or certification.
Storage, security and retention
OAuth credentials are stored on the VPS with restricted filesystem permissions. Relevant content can persist in assistant conversations, task outputs, local working files and backups. Authorized reports may also persist in selected delivery services. This deployment does not currently promise a single automatic deletion period for all such records.
The operator controls access to the deployment and can review or remove retained working data. Revoking Google authorization prevents further authorized API access but does not automatically erase previously created summaries, transcripts, reports, backups or provider-held records. No system can guarantee absolute security.
Your choices
The account holder can revoke this application’s access through Google Account third-party connections and can request review or deletion of retained deployment data by contacting aifaithlab@gmail.com. Service-provider records and backup copies may require separate handling.
Website visitors
These public pages contain no analytics scripts, advertising, sign-in forms or application cookies. The hosting and network infrastructure necessarily processes connection information such as IP addresses; operational or security records may be retained by infrastructure providers.
Changes and contact
This policy will be updated when the integration’s disclosed practices change. Contact: aifaithlab@gmail.com.