Privacy policy

thury.be is a set of static HTML pages. It sets no cookies, runs no analytics or advertising, and loads no third-party fonts or scripts — the fonts are self-hosted and served from this domain only. The web server keeps standard access logs (IP address, requested page, timestamp) for security and troubleshooting; those logs are rotated automatically.

Hermes Agent is a personal, single-user automation assistant operated by Johan Thury, Belgium, on a private server he owns. It has exactly one user — the owner — and no other person can create an account or authorise access to it.

Data accessed

With the owner's explicit consent, the application requests these Google scopes:

• gmail.readonly, gmail.modify, gmail.send — read the owner's mail, label messages, and send mail on his behalf;
• calendar — read, create and update events in the owner's calendar;
• drive, documents, spreadsheets — read and write files the owner points the assistant to.

Data is accessed only in response to a request from the owner, or by a scheduled job the owner configured himself.

Storage

• OAuth credentials (access and refresh tokens) are stored in a local file on the owner's own server, readable only by his UNIX account.
• Message and document content is processed in memory; temporary copies stay on that same private server and are pruned after 24 hours.
• No Google user data is stored in any external or cloud service operated by anyone other than the owner.

Sharing

No data is sold, rented or shared with third parties. There are no advertising or analytics services. Data leaves the server only when the owner uses a feature with an external effect — for example sending an email to a recipient he chose — or when a text he submits is processed by a language-model provider in order to answer his own question.

The application's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is not used to develop, improve or train generalised AI or machine-learning models, is not used for advertising, and is not transferred to others except as necessary to provide the feature the owner asked for, to comply with applicable law, or as part of a merger or acquisition with notice to the user.

Temporary data is deleted automatically after 24 hours; logs are rotated. The owner can remove all access instantly by revoking the application's grant at myaccount.google.com/permissions, and can delete the on-disk credentials by removing the token file from the server. A deletion request can also be sent to the address below; it is carried out within 30 days.

If this policy changes, the date at the top of this page is updated. Material changes affecting the application are announced to the owner — the only user — before taking effect.

Controller

Johan Thury, Belgium

E-mail

jthury@gmail.com