Workplace Privacy Policy

Workplace is Alex Finn’s personal work interface for organizing tasks and using a locally installed Hermes AI assistant. This policy describes its Google integration. Connecting Gmail does not subscribe you to a newsletter.

Google data accessed
With your permission, Workplace reads your Gmail address, message identifiers, labels, sender and recipient information, subjects, dates, snippets, and message content needed for inbox triage or assistance you request. The current inbox watcher requests Gmail read-only access. This permission does not allow sending, modifying, or deleting Gmail messages. Additional Google permissions require separate authorization.

Purpose and AI processing
Workplace uses email data to identify messages needing attention, summarize them, create related tasks, and display an inbox widget. Relevant email headers, excerpts or content, and task context may be sent to the AI service configured in Hermes to provide these features. That provider’s applicable privacy terms, retention rules, and your account settings also apply. Review those terms before connecting sensitive email. Email is not published to this website or sent to newsletter subscribers.

Limited Use
Workplace’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements: https://developers.google.com/terms/api-services-user-data-policy. Google user data is used to provide the user-facing features described here, not for advertising, sale, or training generalized AI or machine-learning models. Transfers to service providers are limited to providing these features or other uses permitted by that policy.

Storage and security
In this personal local installation, OAuth credentials are stored on your computer in Hermes’ configuration directory. Workplace stores application state, task records, selected email references, and summaries locally. Content included in assistant conversations may also be kept in local conversation history. Configured AI providers process supplied information under their own terms and settings. Backups, synchronization, remote access, and other tools you enable can affect where local information is available. Protect your computer and backups; absolute security cannot be guaranteed.

Retention, disconnecting, and deletion
Records remain until the relevant local data is removed. Deleting a task does not necessarily delete conversation history or backups. You can disable inbox checks in Workplace. To revoke Google access, remove Workplace at https://myaccount.google.com/connections. Revocation stops future authorized API access but does not erase previously stored data. Delete the relevant Workplace/Hermes records and backups and use your configured provider’s deletion controls to remove retained information. Disconnecting Workplace does not delete Gmail messages.

Website
These informational pages are hosted by Substack; its website privacy and cookie policies apply to visits. The local Gmail integration does not upload your email to Substack.

Changes and contact
This policy may change as Workplace changes. Material changes to requested Google access require appropriate notice and renewed consent when required. For privacy questions, contact Alex Finn at alex@alexfinn.ai.