Privacy policy
Last updated 20 July 2026
Purpose
Hermes Mail Console is a private, self-hosted email operations tool used by its operator to manage authorised business communications and replies.
Google account data
When an operator connects a Google Workspace mailbox, the application receives permission to authenticate to Gmail SMTP and IMAP. It uses that access to send operator-approved messages, retrieve replies and delivery notifications, maintain conversation threads, and stop follow-up after replies or opt-outs. The application does not sell Google user data, use it for advertising, or disclose it to unrelated third parties.
Storage and protection
OAuth refresh tokens are encrypted at rest on the operator-controlled server. Email addresses, campaign content, message metadata, replies, and audit records are stored only for operating and documenting the communication workflow. Access is restricted to the authenticated operator and explicitly authorised automation.
Retention and deletion
Operational data is retained while needed for active communications, suppression records, security, and audit obligations. Connected mailbox access can be revoked in the Google Account security settings. The operator can also remove a mailbox and its stored credentials from Hermes.
Contact
Privacy and deletion enquiries may be sent to james@myedinburghbusiness.org.