Privacy Policy
Effective and last updated: October 2, 2026
Scope
Hermes Google Workspace is a private automation operated by Joshua To for personal and household scheduling and productivity. It is not a public application and does not accept public user accounts.
Google data accessed
When authorized by the Google account owner, the application may access:
- Gmail: message metadata and content needed to identify scheduling information, plus sending or modifying messages only when directed by the owner.
- Google Calendar: calendars and events needed to check availability and create, update, or remove events at the owner’s direction.
- Google Drive, Docs, and Sheets: files explicitly relevant to an owner-requested workflow.
- Google Contacts: names and contact details needed to identify participants.
How data is used
Google user data is used only to perform the owner-requested scheduling, email, document, and productivity functions described above. It is not used for advertising, profiling, credit decisions, or sale.
Limited use
The application’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Google user data is not transferred to third parties except when necessary to provide an owner-requested function, comply with applicable law, address a security issue, or with the owner’s explicit consent.
Storage and retention
OAuth credentials and workflow data are stored on systems controlled by the account owner. Data is retained only as needed for the requested workflows, continuity, troubleshooting, and legal obligations. The owner may delete local workflow data or revoke Google access at any time.
Human access
Google user data is not routinely read by another person. Human access occurs only with the owner’s affirmative permission, for security or abuse investigation, to comply with law, or when necessary to maintain the owner-operated service.
Security
Access is protected by Google OAuth, least-necessary account permissions, local operating-system controls, and restricted administrative access. No method of storage or transmission can be guaranteed completely secure.
Cookies and analytics
This disclosure site does not use Google Analytics, advertising cookies, or third-party tracking technologies. The hosting provider may process standard network and security logs.
Your choices
The Google account owner can review or revoke the application’s access from the Google Account security settings. Revocation stops future API access. Requests concerning stored workflow data may be sent to the contact below.
Contact
Email: joshto@gmail.com