Privacy Policy
This policy covers two things: this website, and Hermes, a private automation client that the site's operator runs on his own computer and connects to his own Google Account.
In one line: Hermes is a single-user tool. It reads and sends email and reads calendar, contacts, Drive, Sheets and Docs for one Google Account, the operator's own. There are no other users, nothing is collected from visitors, and nothing is sold or shared for advertising.
Who operates this
irvingoh.com and Hermes are operated by Irvin Goh, an individual based in Singapore. Contact: irvingoh999@gmail.com.
What this website collects
- No accounts, no sign-up, no contact forms.
- No advertising cookies and no cross-site tracking. The site is a static portfolio.
- Standard server logs (IP address, user agent, requested URL) may be produced by the hosting provider for security and reliability.
What Hermes accesses, and why
Hermes is authorised by its operator to use the following Google scopes, for the operator's own account only:
- Gmail (read, modify, send) to read incoming mail, classify it, and send mail on the operator's behalf, for example job applications and replies.
- Calendar to read and create the operator's own events.
- Drive, Sheets and Docs to read and write files in the operator's own Drive.
- Contacts (read-only) to resolve the names already in the operator's address book.
How data is stored and protected
- OAuth tokens are stored on the operator's own computer, in files readable only by the operator's operating-system account.
- Mail and calendar content is cached locally so the tool can work, and is readable only by the operator.
- Data is not stored on this website, and this website has no access to the operator's Google data.
Sharing with third parties
- Nothing is sold, rented or shared for advertising, and Google user data is never used to train generalised AI models.
- Message and calendar content may be sent to a third-party AI model provider strictly to process it on the operator's behalf, such as summarising a message or drafting a reply. Only what is needed for that step is sent.
- Hermes' use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.
Retention and deletion
- Access can be revoked at any time at myaccount.google.com/permissions, which immediately stops all further access.
- Locally cached copies can be deleted at any time by deleting the tool's local data directory on the operator's computer. Nothing needs to be requested from anyone else.
Changes
Any change to this policy is published on this page with a new date.