Last updated: September 13, 2026
This Privacy Policy describes how Hermes Agent ("Hermes," "we," "us," or "our") handles information in connection with the Hermes desktop application and any associated features or services (the "Service"). It complements our Terms of Service and explains what data — if any — is collected, how it is used, and what rights you have.
Hermes is designed as a local-first desktop application. The application runs on your device. It does not collect, store, or transmit your personal data, conversation history, files, or prompts to us unless you explicitly take an action that sends data elsewhere.
The only data that ever leaves your device is data you intentionally send to a third-party service you have connected to Hermes — for example, an AI model provider's API endpoint. We have no access to that data and are not responsible for how the third-party service handles it.
By default, Hermes does not collect or receive:
Certain features of Hermes allow you to connect to external services — for example, AI model providers, cloud storage, search APIs, or other tools. When you use such a feature:
This Privacy Policy does not apply to third-party services. Their handling of your data is governed by their own policies.
Hermes may store certain data locally on your device to function, including:
This data stays on your device and is not transmitted to us. If you uninstall Hermes, this local data is removed (subject to your operating system's usual uninstall behavior).
At this time, Hermes does not require you to create an account, and does not collect usage data by default. If a future version introduces an optional feature that involves sending data — for example, an opt-in update notification, a voluntary feedback mechanism, or a cloud-sync feature — that feature will:
You may opt out of or disable any such feature at any time through the application settings.
Hermes is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has used Hermes to send data to a third party, please contact us using the details in section 9 and we will take appropriate steps.
Because Hermes runs locally and does not transmit your data to our servers by default, the primary security of your data depends on the security of your own device and your own configuration of any connected third-party services. We encourage you to:
We are not responsible for the security practices of third-party services you choose to connect.
We may update this Privacy Policy from time to time to reflect changes in the Service, new features, or legal requirements. We will post the revised policy on this page and update the "Last updated" date. If we introduce a change that materially affects how data is handled, we will notify you before the change takes effect. Your continued use of Hermes after changes are posted constitutes acceptance of the updated policy.
Because Hermes does not collect your personal data by default, most rights that apply to personal data (access, deletion, correction, portability) are exercised locally: you control the data on your device, and uninstalling the application removes local data.
If you believe you have transmitted personal data to a third-party service through Hermes, you should exercise your rights directly with that service per their privacy policy.
If you have questions about this policy or believe we have not followed it, contact us using the details below.
For questions, concerns, or requests related to this Privacy Policy or data handling in Hermes:
Hermes Agent
contact@hermes-agent.local
For security vulnerabilities or privacy concerns, please report them responsibly through the contact above rather than posting publicly.