Privacy Policy
Nelson Hermes (“the app”, “we”) is a private, self-hosted personal automation tool operated by a single individual for their own use. This policy explains what data the app accesses, how it is used, where it is stored, and what controls you have.
Because the app is single-user, the words “you” and “the owner” refer to the same person: the individual who runs the app and connects their own Google account.
1. Google user data we access
The app requests access to the owner's own Google account through Google's OAuth 2.0 authorization process. The permissions requested, and what each one is used for, are:
| Google API scope | What it allows | Why the app needs it |
|---|---|---|
| calendar | Read and modify Google Calendar events and calendars. | To answer the owner's questions about their schedule and to create or change events the owner asks for. |
| gmail.modify | Read, search, send and label Gmail messages (does not permit permanent deletion of mail). | To find, summarize and read mail on request, and to send or reply to messages the owner dictates. |
| documents | Read and edit Google Docs documents. | To read and write documents the owner works with. |
| drive | Read and manage files and folders in the owner's Google Drive. | To locate, read, upload and organize files the owner works with. |
The app does not request any permissions beyond those listed above.
2. How we use Google user data
Google user data is used only to carry out actions the owner explicitly requests through their AI assistant. The app does not perform background processing, profiling, analytics or automated decision-making on Google user data.
- We do not sell or rent Google user data.
- We do not share or transfer Google user data to any third party.
- We do not use Google user data for advertising, marketing or credit-worthiness purposes.
- We do not use Google user data to train, fine-tune or improve generalized artificial intelligence or machine-learning models.
- We do not allow humans to read Google user data, except where the owner has given explicit permission for a specific request, or where required for security or legal reasons.
Limited Use disclosure
The app's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
3. Where data is stored and for how long
The app is self-hosted: it runs on a computer owned and controlled by the owner. Google OAuth credentials (access and refresh tokens) are stored only on that computer, in a restricted-permission location, and are never transmitted to us or to any third party.
The app does not maintain a database or archive of your Gmail, Calendar, Docs or Drive content. Data is retrieved from Google at the moment of a request, used to fulfil that request, and is not retained afterwards beyond transient in-memory processing and locally written operation logs.
Local operation logs record what action was taken (for example, “read calendar event”) for troubleshooting and audit purposes. Credentials are redacted from these logs. Logs stay on the owner's computer and are rotated and deleted routinely.
4. Sharing
We do not share Google user data with any third party. Requests the owner makes are sent directly between the owner's computer and Google's APIs. No intermediate service, cloud relay or analytics provider receives the data.
5. Your controls
You can review or revoke the app's access to your Google account at any time at myaccount.google.com/permissions. Revoking access takes effect immediately; the app can no longer read or change your Google data.
Because the app stores no server-side copy of your Google data, there is nothing else to delete. If you would like any locally stored credential or log removed, or you have a deletion request, contact us at the address below and it will be actioned.
6. Security
OAuth credentials are stored with restricted file permissions on the owner's computer. Access to the app is limited to the owner. The app communicates with Google over encrypted HTTPS connections only.
7. Children
The app is not directed to children and is not made available to anyone other than its single owner. It is not intended for use by anyone under the age of 13.
8. Changes to this policy
If this policy changes, the updated version will be posted on this page with a revised “last updated” date.
9. Contact
For any question about this policy or about how Google user data is handled, contact:
memo.nelson22@gmail.com