Privacy policy
Henry Inbox is a private, owner-operated email assistant running on Hermes. The consent-screen application name may be Hermes or Henry Inbox. This policy describes this deployment, not the Hermes software project generally.
Data accessed
With the account holder's authorization, the application can access email message content, headers, labels, and mailbox metadata needed for searching, summarizing, prioritizing, and following up on email. Attachments may be accessed when needed for an authorized task. The dedicated assistant Gmail account additionally permits sending email at the owner's request.
Use and processing
Email data is used to carry out the owner's email-assistance requests. Relevant message content may be included in prompts sent to the AI service configured in Hermes. That service's processing and retention terms also apply. This policy does not promise that all processing remains on the owner's server.
Email data is not sold or used by this application for advertising or for training a general-purpose AI model. Henry Inbox's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Any configured AI processing must be compatible with those requirements.
Permissions and security
Personal Gmail connections use the Gmail read-only scope. Only the dedicated assistant Gmail account uses the send scope. Mailbox.org access uses an IMAP app password: the connector opens folders read-only and uses non-marking message fetches, but the underlying credential may permit mailbox changes. These are different security boundaries.
OAuth credentials, tokens, and the IMAP app password are stored on the operator's server with owner-only filesystem permissions. This is access control, not a claim of encryption at rest. No credentials or email contents are intentionally published on this website.
Retention and deletion
Authorization credentials are retained until removed or revoked. Requests, excerpts, summaries, and tool results may persist in Hermes conversation history, logs, or backups according to the operator's configuration. This deployment does not promise a fixed automatic deletion period. The operator can remove stored credentials and delete retained records and backups under their control; external AI providers may have separate retention obligations.
Revoking access and contact
Google access can be revoked through Google Account third-party connections. Mailbox.org access can be revoked by deleting the app password in account security settings. Revoking access prevents future authorized access but does not itself erase previously retained records.
This application is for the operator's own accounts, with no public signup. Authorized users can contact the operator through their existing direct communication channel or the support email displayed on Google's consent screen to request access removal, deletion, or clarification.
Website hosting
If this site is deployed on Cloudflare, Cloudflare processes ordinary website request information such as IP address and request metadata under its own applicable terms. These static pages do not include application analytics, advertising scripts, or sign-in forms.
Changes
This policy must be updated if the deployment's purpose, permissions, providers, or data-handling practices change.