Your work stays yours.

Summary

Hermes is an AI agent platform that lets you run agent tasks through your own account, private container runtime, and private storage. Your prompts, files, generated outputs, tool results, bot configuration, and workspace data are used to operate Hermes for you.

We do not sell personal data. We do not use private workspace data for advertising. We do not use your private workspace data to track you across other services or websites.

Google user data

If you sign in with Google, Hermes receives the minimum account information needed to create and secure your account. This may include your Google account identifier, email address, name, and profile image, depending on what Google provides through the sign-in flow.

Hermes uses Google sign-in data only for authentication, account creation, account security, support, and showing you your own account state inside the product. Hermes does not use Google sign-in data for advertising, sale, resale, or cross-service tracking.

Hermes does not request access to Gmail, Google Drive, Google Calendar, Google Contacts, or other Google product content unless a future feature clearly asks for your permission first. If that changes, this policy will be updated to explain the data requested and the purpose of access before the feature is used.

User workspace data

Agent tasks may process the content you provide, such as messages, files, credentials you choose to connect, command output, generated files, and tool results. This cloud data is for your own processing and use inside Hermes.

Each user is scoped to a private runtime and private storage area. Other Hermes users cannot browse your private workspace. Hermes personnel do not use workspace data for unrelated product analytics, advertising profiles, or external tracking.

Storage and security

Hermes stores account and service data only as needed to provide the product: authentication state, subscription status, workspace files, runtime configuration, bot access settings, and operational records needed to keep the service reliable.

We use access controls, per-user isolation, private storage paths, and service-side authentication checks to protect user data. No internet service can guarantee perfect security, but Hermes is designed so that user workspaces are isolated by default.

Deletion and control

You may delete files, disconnect credentials, remove bot access, and stop using connected providers from within Hermes where those controls are available. You may also request account and workspace deletion by contacting us.

When deletion is requested, Hermes will delete or de-identify data that is no longer needed to provide the service, except where we must retain limited records for security, billing, abuse prevention, legal compliance, or dispute resolution.

Sharing and service providers

Hermes may use trusted service providers to operate the product, including cloud hosting, authentication, billing, storage, and infrastructure services. These providers process data only as needed to provide their services to Hermes.

We may disclose limited information if required by law, to protect the security of Hermes and its users, to investigate abuse, or to enforce our Terms of Service.

Changes

If this policy changes materially, we will update this page and revise the effective date. If a change affects how Hermes accesses, uses, stores, or shares Google user data, we will update this page before relying on the new practice.