Data practices · Effective October 28, 2026

Privacy policy

This policy describes the privately operated Hermes Personal Unraid deployment maintained by the owner of promethean.markets. It is intended for the owner’s accounts and connected personal expense groups, rather than a public service.

Information the assistant accesses

• Google account profile: identity and email address used to distinguish authorized accounts.
• Gmail: message headers, bodies, attachments, labels and drafts needed for requested email tasks. Authorized mail actions may include reading, organizing, drafting and sending.
• Google Calendar: calendars, events, descriptions, attendees and scheduling details needed to read or manage events and calendars.
• Google Tasks: task lists, titles, notes, due dates and completion state needed to read or manage tasks.
• Hotmail: profile, mailbox settings, messages, folders, attachments and drafts needed for mail operations.
• Tricount: members, expenses, reimbursements and balances in groups the owner connects.
• SMS/RCS and WhatsApp: linked-device sessions, message text, sender details, conversation metadata and timestamps used for requested read-only briefings and shift checks. A private community OpenMessage bridge synchronizes message history to the owner’s server. Sending, reactions and explicit mark-read actions are disabled.
• Assistant state: prompts, responses, tool results, conversation history, selected memories and operational logs.

Purpose and AI processing

Data is used to provide the personal-assistant features described on the homepage and to carry out the owner’s requests. Relevant conversation content and tool results may be transmitted over encrypted connections to OpenRouter and its configured Cloudflare inference provider for a DeepSeek model. These services process the content needed to generate answers and tool calls. Google and Microsoft receive API requests for their respective account operations. The Tricount connector communicates with Tricount.

The operator does not sell account data, use it for advertising, or use it to train a general-purpose AI model. Google API data is limited to the disclosed assistant features and handled under the Google API Services User Data Policy, including its Limited Use requirements. Model-service processing and retention are also subject to the provider’s applicable policies and account settings.

Storage and access

OAuth credentials, linked-device credentials, synchronized message history, assistant history, memory and operational records are stored on the owner’s private server under filesystem access controls. Google credential files are encrypted by the connector. Hotmail’s headless connector uses an access-restricted local token cache. Authorized users of the private assistant and the server administrator can access its stored records. This public information website does not receive or display private mailbox, calendar, task or expense data.

Retention and deletion

The assistant may retain conversation history, selected memory and operational logs until the owner deletes them. There is no automatic deletion period promised by this deployment. Credentials remain stored until removed or revoked; provider-side data and records follow their providers’ policies. To remove locally stored account data, contact the operator and identify the account and records to remove. Revoking an account connection stops further authorized access but does not automatically erase prior chat history or memory.

Your choices

Google access can be reviewed or revoked at Google Account connections. Microsoft permissions can be reviewed at Microsoft app permissions. Linked messaging devices can be removed in Google Messages Device pairing and WhatsApp Linked devices. The owner can disconnect integrations, delete local records, and choose which account or group a request should use. Sending mail requires an explicit user request; expense changes are presented for review.

This website

Cloudflare Pages hosts these public information pages and may process network and request metadata for delivery and security. These pages add no advertising trackers, analytics scripts, account forms or application cookies.

Contact and changes

For access, deletion or privacy questions, contact the operator. Material changes to account-data use will be disclosed here and, where required, require renewed consent before the new use begins.