This Privacy Policy explains how RavenCorp ("we", "us", or "our"), operating the website https://ravencorp.site and the application Hermes, collects, uses, processes, and protects your information when you connect and interact with our application.
1. Information We Collect
When you authenticate your Google Account with Hermes, we request access to specific Google user data based strictly on the permissions (OAuth scopes) you grant:
Account Identifiers: Your primary email address and basic profile information to establish session authentication.
Google Workspace Data: Depending on the enabled features, this may include metadata and content from Gmail messages, Google Calendar events, and Google Drive files exclusively to process requests initiated directly by you.
2. How We Use Google User Data
We use the data obtained via Google APIs exclusively to deliver the functionality of Hermes. Specific uses include:
Reading, analyzing, or summarizing requested emails or calendar events per your explicit instructions.
Drafting responses or creating/updating documents, calendar events, or files at your explicit command.
Google API Services User Data Policy Compliance
Hermes's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
3. Data Sharing and Transfer
We strictly enforce the following rules regarding your data:
No Third-Party Sharing: We do not sell, rent, or trade your personal data or Google Workspace data to third parties, data brokers, or advertisers.
No AI Model Training on Sensitive Data: Google Workspace user data (such as emails, documents, or calendar items) is NOT used to train, retrain, or improve generalized or foundation artificial intelligence/machine learning models without explicit, opt-in consent.
Service Providers: We may transmit data strictly through encrypted channels to infrastructure hosting providers solely to execute user requests.
4. Data Retention and Deletion
We adhere to data minimization principles:
OAuth tokens are stored securely using encryption at rest.
Google Workspace content (emails, files) processed during requests is handled in-memory and not stored persistently, unless explicitly saved by the user within personal configurations.
You can revoke our application's access at any time via your Google Security Settings. Upon revocation, all cached tokens are immediately invalidated.
To request the permanent deletion of any associated log or account data, contact us at info@ravencorp.site.
5. Security Measures
We implement standard security practices, including TLS/HTTPS encryption in transit and restricted server-side credential isolation, to safeguard user data against unauthorized access, loss, or alteration.
6. Contact Us
If you have questions or concerns regarding this Privacy Policy, please contact us at: