Hermes Mail — last updated 26 September 2026
Hermes Mail is a single-user personal tool. The only data subject is the owner of the mailbox it is connected to, who is also the person who installed and operates it.
| Data | Why | Scope |
|---|---|---|
| Email messages in the owner's Gmail mailbox (headers and body text, and names of attachments) | To summarise mail, surface messages needing attention, and locate receipts/invoices for the owner's own subscription audit | https://www.googleapis.com/auth/gmail.readonly (read-only; the app cannot send, delete, label or modify mail) |
No other Google data is requested: no contacts, no calendar, no drive, no profile beyond the email address needed to identify the mailbox.
All data stays on the owner's own computer. Mail is fetched directly from Gmail by a local program over an encrypted connection and processed in memory or in local files on that machine. There is no server operated by this project, no database in the cloud, and no third-party processor.
OAuth credentials (a refresh token) are stored in a local file readable only by the owner's user
account (chmod 600).
The tool uses large language models to read and summarise messages on the owner's behalf. Text of messages may be sent to the model provider selected by the owner (an API endpoint configured locally) solely to produce that summary for the owner. The owner controls which provider is used and can change or disable it at any time.
Local caches, indexes and reports can be deleted by the owner at any time; deleting them removes the associated mail content from the machine. Nothing is retained anywhere else.
The owner can revoke this application's access to Gmail at any time at myaccount.google.com/permissions, which immediately invalidates the stored token. The local token file can also be deleted.
Hermes Mail's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
访问的数据：仅本人 Gmail 邮箱的邮件（标题、正文、附件名），权限为 gmail.readonly
只读 —— 无法发送、删除、修改或加标签。不读取通讯录、日历、云盘。
存储位置：全部在本人的电脑上。本机程序直接通过加密连接从 Gmail 取信，在本机内存或本地文件里处理。 本项目没有云端服务器、没有云端数据库、没有第三方处理方。OAuth 凭据（refresh token）存在只有本人账号可读的本地文件（chmod 600）。
绝不做的事：不出售、不分享、不用于广告或画像、不用于训练模型、不转交给任何其他人。
自动化处理：使用大语言模型代读并摘要邮件时，邮件文本可能被发送到本人自行配置的模型 API， 仅用于生成摘要；本人可随时更换或关闭。
删除与撤销：本地缓存/索引/报告可随时删除；可随时在 myaccount.google.com/permissions 撤销本应用的访问权限， 撤销后本地 token 立即失效。
本应用对 Google API 数据的使用遵守 Google API Services User Data Policy（含 Limited Use 要求）。