Hermes - Google Apps Connector

A private, single-user connector that lets the Hermes Agent read and act on its operator's own Google Workspace data, on that operator's behalf and at their instruction.

Personal use. This application is operated by a single individual, for that individual's own Google Account. It has exactly one authorized user, and serves only that user's data. It is not offered for sign-up, and no other person can authorize or sign in to it.

What this application is

Hermes - Google Apps Connector is the Google authorization component of Hermes, a self-hosted personal AI assistant. Hermes runs on infrastructure controlled by its operator. This connector exists so that the assistant can work with the same Google Account that the operator already uses, without the operator having to manually copy and paste data in and out of the assistant.

There is no web application for third parties to sign in to, no user registration, and no shared account. The connector authorizes a single Google Account, belonging to the operator, and stores the resulting credentials on that operator's own machine.

What it does

Reads Gmail messages the operator asks about, so the assistant can search, summarize, and answer questions about their own mail.
Sends and replies to email at the operator's explicit instruction, from their own address.
Reads and writes Google Calendar events, so the operator can ask what is on their schedule and have the assistant create or update events.
Reads, uploads, downloads, and organizes files in the operator's Google Drive, including Google Docs, Sheets, and Forms.
Reads the operator's own Google Contacts, so the assistant can resolve names to addresses when sending mail or inviting attendees.

Every action is initiated by the operator. The assistant does not act autonomously on Google data, does not scan or index the account in the background, and does not send mail, change calendars, or modify or delete files without the operator requesting it.

Google user data this application requests, and why

The application requests only the scopes required for the functions above. Each one is listed here with its purpose.

Gmail - read Reads the operator's own messages so the assistant can search and summarize them on request.

Gmail - send Sends email from the operator's own address, only when the operator asks for a specific message to be sent.

Gmail - modify Applies labels and marks messages read or unread, so the assistant can triage mail the operator asks it to triage.

Google Calendar Reads upcoming events and creates, updates, or removes events the operator requests.

Google Drive Reads, uploads, downloads, shares, and organizes files the operator points the assistant at.

Google Sheets Reads and writes spreadsheet ranges for data the operator asks the assistant to record or report on.

Google Docs Reads and appends to documents, so the assistant can draft and update notes and reports for the operator.

Google Forms Creates and reads the operator's own forms and responses when asked.

Contacts - read Resolves names to email addresses when the operator asks the assistant to email or invite someone.

How your data is handled

Stored locally. The OAuth token is stored on the operator's own machine, in a file readable only by that operator's account.
Not shared. Google user data is never sold, rented, transferred, or disclosed to advertisers, data brokers, or any third party for marketing or profiling.
Not used for advertising. The application contains no advertising and no interest-based tracking of any kind.
Not used to train AI models. Data retrieved from Google APIs is not used to train, fine-tune, or otherwise improve any machine learning model, and is not transferred for that purpose.
No human review. No person reads the operator's Google data, other than the operator themselves.
Deletion on request. The operator can revoke access at any time at myaccount.google.com/permissions, which immediately ends all access, and can delete the stored token from their own machine.

Limited Use disclosure

Hermes - Google Apps Connector's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Acceptable use

This application accesses Google APIs only for the personal productivity purposes described above. It does not generate, create, or distribute AI-generated non-consensual intimate imagery (AI NCII), and it does not use Google APIs to produce, request, store, or disseminate any such material. It does not use Google APIs for surveillance, for building profiles of other people, or for any purpose prohibited by Google's API Services User Data Policy or product-specific Google developer policies.

Contact

Questions about this application, or requests relating to Google user data, can be sent to hermesagentforazee@gmail.com.

Application name: Hermes - Google Apps Connector. Personal use, single authorized user.