Privacy notice
This notice describes the currently verified operation of Wesley Harris’s privately operated Hermes Executive Assistant.
Operator and contact
Wesley Harris operates this installation. Contact: harriswesleyc@gmail.com.
Information accessed
With the connected account owner’s authorization, the assistant reads email information needed for the requested task, such as sender, subject, received time and message content. It can read calendar names, event titles, event times, status, locations and event links. The calendar reader currently does not request event descriptions or attendee lists.
Purpose
Connected-account information is used to answer the operator’s requests, summarize email priorities and upcoming commitments, and prepare suggestions or proposed reply text. The current Google permissions are read-only.
Processing and service providers
The assistant runs on a privately administered Hostinger server. Information included in an assistant request or tool result may be processed by the selected AI model provider, currently OpenAI, so the model can prepare its response. Google provides the connected email and calendar services. Each provider’s applicable terms and privacy practices also apply to its processing.
Storage and access controls
Authorization credentials are stored in private files on the server. Credential files have restricted access but are not separately encrypted by this integration. Model conversations and tool results may be retained in the assistant’s session history. Read-only email and calendar permissions restrict changes to the connected Google accounts; they do not prevent information from being included in an authorized assistant response.
Retention and deletion
No automatic deletion period has been configured or verified for assistant session history. Records may remain until the operator deletes them. The account owner can request deletion of locally retained information through the contact address above. Revoking Google access prevents future authorized retrieval; it does not by itself delete information already retained locally or by service providers.
Control of Google access
The account owner can revoke the app’s access through the third-party connections section of their Google Account. Additional accounts or broader permissions require a separate authorization step. The assistant is currently configured without Google email sending or calendar writing permissions.
Public disclosure
This information page is intended to describe the assistant. It does not need to display private messages, event details, credentials or session transcripts. No analytics or tracking code is included in this static website.
Website request logs
The web server may record standard request information, such as an IP address, requested page, time and response status, for security and troubleshooting. These server logs are separate from assistant conversations. This static website has no analytics scripts or advertising code.
Changes
The operator should update this notice when connected services, permissions, processing providers or retention practices change.