Hermes29062026

A personal Google Workspace assistant for Matthew Choi — private, self-hosted, and single-user.

What this app is

Hermes29062026 is the Google Workspace component of Hermes, a self-hosted personal AI assistant that runs on Matthew's own hardware. It exists for one purpose: to let an AI agent work with the Google account that the account owner already owns — reading and sending email, managing calendar events, and handling files in Drive — without a third-party service holding the credentials.

The assistant is not a product and is not offered to anyone else. There is no sign-up, no account creation, no mobile app, and no multi-tenant backend. One person uses it: the person who deployed it.

What it does

Gmail

Searches and reads the owner's mail, and sends mail on the owner's behalf — for example, delivering a document the owner asked to be emailed. Labels and threads are used to organise what has been processed.

Google Calendar

Lists, creates, and deletes calendar events for the owner, with timezone-aware scheduling.

Google Drive and Docs

Searches, reads, and writes documents, spreadsheets, and files that belong to the owner.

How your data is handled

Nothing is sold, shared, or used for advertising. There is no analytics, no telemetry, and no third-party processor involved in the Google data path.
Mail and documents stay on the owner's own machines. The assistant runs on hardware the owner controls, inside his own home network. Google data is read at the moment it is needed and is not retained in any third-party database.
OAuth credentials live in one place on the owner's host. The refresh token is stored in a local file readable only by the owner's user account. It is never transmitted anywhere except to Google's own token endpoint.
The app is built on Google's own APIs and operates in accordance with the Google APIs Terms of Service and the Google API Services User Data Policy.
It does not generate, distribute, or amplify non-consensual intimate imagery or any other sexual content, and no such functionality is part of the assistant.

Who can use it

Only the owner. The OAuth app is configured for a single account, and any consent is granted by that account to a server the owner runs.