Last updated: 28 September 2026
Hermes is made by Nexus Labs Technology L.L.C-FZ ("we"), Meydan Grandstand, 6th floor, Meydan Road, Nad Al Sheba, Dubai, United Arab Emirates. This policy explains what Hermes does with your information, and in particular with the information it receives from your Google account.
Contact: info@nexuslabuae.ai
When you connect Gmail, Google shows you exactly two permissions:
| permission | what it allows | why Hermes needs it |
|---|---|---|
View your email messages and settings (gmail.readonly) | reading messages | to read email from the sources you have added |
Send email on your behalf (gmail.send) | sending a message | to send a reply after you approve it |
Hermes does not ask for permission to delete email, move it to the trash, or change your labels or settings. Neither of the permissions above can do any of those things — so this is a limit on what Hermes can do, not only on what it chooses to do.
Hermes works from your household's sources: the senders whose email matters to your family. Today those are your children's schools. You add them on Hermes' Connections page, as a school's email domain (which covers everyone writing from the school's own domain) or as a single address (for example a teacher who writes from a personal address), and you can stop Hermes reading any of them there at any time.
Only email that passes this admission check is read or stored. Email from anyone else in your mailbox is not processed by Hermes, does not enter our systems, and is never sent to the AI provider.
We check in two places, deliberately. We ask for only the messages from your sources where Google allows it, and Hermes checks every message against your sources again before keeping anything. A message that does not pass is discarded, not stored.
Message content is encrypted at rest. The keys that protect it are held in a separate key service on a separate server, not alongside the data. That key service can only be unlocked by two of three independent key holders acting together; no single person, including anyone at Nexus Labs, can unlock it alone.
Hermes relies on a small number of service providers, each only to run the product for you:
| provider | what for |
|---|---|
| Composio | connecting to your Gmail account, receiving new email from your sources, and sending the replies you approve. Composio holds the Google access credential on our behalf; Hermes itself never receives it |
| Anthropic (Claude API) | the AI that reads a message to work out what it asks of you, and that drafts a reply when you ask Hermes to |
| Telegram | only if you connect your phone: delivering new items, Hermes' questions and reply drafts to you, and carrying back your answers, edits and approvals |
| your Gmail account itself | |
| Contabo, France | the servers Hermes runs on |
What the AI provider receives. To read a message: its text, subject, sender name and attachments, your children's first names and school groups (for example "Year 4"), and your time zone. To draft a reply you asked for: the original message, what Hermes understood from it, the facts you have confirmed and your answers to Hermes' questions, and the school's and your email addresses. Messages that do not pass Hermes' household-source admission check are never sent to Anthropic.
Where your information goes. Hermes' own servers are in France. When a message is read, or a reply is drafted, the information above is sent to Anthropic. Processing may take place in the United States and other locations where Anthropic operates. Under Anthropic's standard commercial terms, inputs and outputs are deleted within 30 days unless another arrangement applies, subject to limited legal and trust-and-safety exceptions (for example, content its automated safety systems flag may be kept for up to two years).
Telegram. If you connect your phone, the items, questions and reply drafts Hermes sends you, and your answers, edits and approvals, pass through Telegram's servers, as any Telegram message does. Hermes sends them only to the chat you connected, and you can disconnect it at any time from Connections.
We do not sell your information, share it with advertisers or data brokers, use it for advertising, or use it to decide anything about credit or lending.
We do not use your email or your family's information to train AI models — ours or anyone else's — and Anthropic does not use it to train its models. Information is sent to the AI provider only to read a message, or draft a reply, for you.
Hermes' use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Hermes can draft a reply to a message from one of your sources. If the message asks something only your family can answer — for example whether your child will attend — Hermes asks you first, and the draft says only what you have confirmed. If you use Telegram you can edit the draft there; an edited draft is shown to you again in full, and needs your approval again.
A reply is sent only after you read the full final text and approve it, from your own email address, and it appears in your own Sent folder. For a short time after you approve, you can still undo it. Hermes does not send email on its own.
Email from schools is about children, so Hermes necessarily handles information about them — their names, their school year or class, and what the school asks of them. Hermes is used by parents and guardians, not by children, and is not directed to children. We use children's information only to show the parent what needs doing and to draft replies the parent approves.
We keep your information while your account is active.
You can ask us to erase your information at any time by writing to info@nexuslabuae.ai. Erasure destroys the encryption key that protects your data, which makes the stored content permanently unreadable — it cannot be recovered by us or anyone else.
You can also disconnect Gmail at any time, from Hermes or from your Google account at myaccount.google.com/permissions. Disconnecting stops Hermes receiving any further email immediately. You can disconnect Telegram at any time from Hermes' Connections page.
If we change this policy in a way that affects how your information is used, we will tell you before the change takes effect.
Nexus Labs Technology L.L.C-FZ · info@nexuslabuae.ai