Hermes Mail Privacy Policy

Hermes Mail is a private Gmail assistant for the personal mailbox of the owner of clankychiefjohn.club. It is not offered to the public.

Data accessed and purpose

With the owner's authorization, the application reads Gmail message headers, sender information, subjects, message text, thread context, labels and mailbox metadata for personal triage, summaries, deadlines and alerts. Attachment downloading is not enabled. Authentication/recovery-looking message bodies are withheld before model processing, with additional filtering of outgoing text; detection is not a guarantee against every sensitive detail.

Mail changes and unsubscribing

The owner authorizes marking successfully processed new inbox messages read. The existing inbox backlog is not bulk-marked read. Gmail modify authorization also technically permits broader operations, including sending; code and policy prohibit sending, forwarding, draft creation, deletion, archiving and mailbox-setting changes.

Potential mailing-list unsubscribe candidates are presented for individual approval. No unsubscribe request is sent automatically. After approval for a specifically recognized legitimate subscription, the application may send a standards-based one-click unsubscribe POST to that subscription's public HTTPS endpoint. Such a request can identify the recipient to the mailing-list operator through its unsubscribe token. Suspected scams/phishing and ambiguous senders are not contacted; message links, tracking pixels and remote images are not automatically opened. Unsupported or uncertain unsubscribe methods require further review, not an email send.

Processing and providers

The application runs on infrastructure controlled by the owner. Selected email excerpts are processed by the configured AI model provider for triage. Selected summaries, alerts and unsubscribe suggestions are sent through Telegram. Processing is not exclusively local and providers' applicable terms and retention policies apply. The restricted model worker has no action tools, suppresses plugin discovery, checks for active observer hooks and disables normal conversation persistence. Diagnostics or other owner-initiated sessions may still retain selected information. The application is not intended to include authentication codes, reset links, account numbers or sensitive attachments in notifications.

Storage and security

OAuth credentials and watcher state use owner-restricted files and never appear on this website. The watcher retains processed message IDs for 30 days and short actionable summaries for 7 days, plus minimal deduplication, subscription-review and approved-action records. It does not retain a full-mailbox archive or message bodies in its own state. Logs, Telegram messages, approval records and summaries may persist until separately removed. There is no absolute security guarantee.

Limits on use

Gmail data is not sold, used for advertising, or intentionally used to develop or train generalized AI or machine-learning models. It is used only to provide the owner's requested personal email features. Hermes Mail's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.

Control, deletion and contact

The owner can stop monitoring, remove local credentials/state/logs, remove Telegram messages and revoke access through Google Account connections. Revocation prevents future API access but does not automatically delete existing copies or reverse completed unsubscribe requests. The domain owner is the sole user and operator; contact is through the support email shown on the Google consent screen.

This static website has no application-added forms, analytics, advertising or tracking cookies. Cloudflare hosts the pages and may process ordinary request/security metadata.

Return to homepage