Updated 25 October 2026

Privacy notice

This notice covers the owner's personal Hermes email assistant and this accompanying information website. It does not cover other applications hosted on jpmypa.com.

Access and purpose

Google OAuth is used to authorise access to the owner's Gmail account. The application requests only https://www.googleapis.com/auth/gmail.readonly. Authorised data can include message headers, sender and recipient addresses, subjects, message bodies, labels and attachments when explicitly retrieved. It is used to find messages, summarise information and identify items needing the owner's attention.

The read-only permission does not permit the application to send, delete or change messages. The application does not request the owner's Google password.

AI processing and disclosure

Selected email content, relevant conversation context and instructions are transmitted to Anthropic through its Claude API for processing. Email processing is therefore not entirely local. Provider-side handling and retention are governed by the applicable Anthropic API terms and account settings; this notice does not claim zero retention.

If the owner requests delivery through Signal, generated replies and summaries are transmitted through Signal to the owner's conversation. The application is not used to sell Google user data, serve advertisements, or train a general-purpose AI model.

Storage and retention

OAuth tokens and client configuration are stored in the assistant's local account profile. Retrieved email content, summaries and related context may remain in local conversation history, logs, memory or backups until the owner removes them. There is no fixed automatic deletion period promised by this notice. Credentials and mailbox data are not stored in this public website.

Control and deletion

The owner can revoke access through Google Account connections. Revocation prevents future authorised access but does not itself erase content already saved locally or sent to a processing provider. The owner can separately remove local tokens, retained email extracts, conversation records, memories and applicable backups.

Website visitors

This static website has no forms, advertising, application analytics or embedded third-party scripts. Cloudflare hosts the website and may process connection information such as IP addresses and request metadata to deliver and protect it, under its applicable policies. Visiting this site does not authorise Gmail access.

Google API data use

The application's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.

Operator and contact

This is an owner-operated, personal-use application. For support or a privacy enquiry, use the user support email shown on this application's Google OAuth consent screen.