Privacy policy

Effective date: 14 September 2026.

Operator and purpose

Basel operates this personal Hermes assistant. Questions about this installation or requests concerning stored data can be sent to basel20@gmail.com.

Google data accessed

After authorization, the assistant can access Gmail message content and metadata, including sender and recipient details, and Google Calendar event details, including titles, times, descriptions, and attendees. It can send email, modify messages, and manage events as permitted by the granted scopes and owner tasks. OAuth credentials are stored on the operator's server to maintain the connection. The assistant does not receive the owner's Google password.

Use and disclosure

Google data is used to perform the owner's requested email, calendar, and assistant tasks. Relevant content may be sent to the configured AI provider, currently OpenAI, to interpret instructions and prepare responses or actions. Results sent through Telegram are processed by Telegram. If the owner requests disclosure by email or telephone, the requested content is shared with the chosen recipient and the delivery providers; voice delivery uses Twilio and OpenAI. The server hosting provider processes data required to host the service.

Google user data will not be sold, used for advertising, or used to train general-purpose AI models. Use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.

Storage and retention

Access credentials are stored in a restricted-permission file on the operator's server. Conversations, tool results, and task history may also be retained in the assistant's local history, memory, logs, or backups. An automatic deletion schedule has not been implemented; stored records can remain until removed by the operator. External providers apply their own retention policies and account settings. This notice does not promise immediate removal from their systems.

Control, revocation, and deletion

The owner can revoke the application's access in Google Account connections. Revocation prevents future authorized access but does not erase data already stored by the assistant or delivered to recipients. Contact the operator to request deletion of locally retained data and credentials, including review of backups. The operator must assess any legal retention obligations that apply.

Security and changes

The installation uses restricted credential-file permissions and limits owner chat access. Public inbound telephone conversations are isolated from owner Google tools. No system can guarantee absolute security. Material changes to these data practices will be reflected in an updated policy.