Privacy Policy

Introduction

Welcome to Hermessage. We understand that your privacy and the security of your information are paramount concerns. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our email automation service.

Hermessage is designed to help creators and entrepreneurs manage their inbound communications more effectively through automated response systems. We take your privacy seriously and are committed to transparency about our data practices.

Information We Collect

Account Information

When you register for Hermessage, we collect:

• Name and contact information
• Login credentials
• Billing information when applicable

Email and Message Data

To provide our service, we require access to:

• Email content (incoming and outgoing messages)
• Email metadata (sender, recipient, subject lines, timestamps)
• Contact information of message senders and recipients

Usage Information

We collect data about how you interact with our service:

• Features used
• Response templates created and utilized
• Performance metrics of automated responses
• Login times and activity sessions

Technical Data

• IP address
• Browser type and version
• Device information
• Cookies and similar tracking technologies

How We Use Your Information

Core Service Functionality

• To connect to your email and messaging accounts
• To analyze incoming messages
• To generate and send automated responses
• To manage follow-up communications

Service Improvement

• To analyze usage patterns and optimize features
• To debug software issues
• To develop new functionality

Communication

• To provide service updates and essential information
• To respond to your inquiries and support requests
• To send product newsletters if you've opted in

Business Operations

• For billing and account management
• For fraud prevention and security measures
• For legal compliance and responding to legal requests

Data Security

We implement robust security measures to protect your information:

• Industry-standard encryption for data in transit and at rest
• Regular security assessments and penetration testing
• Strict access controls for Hermessage personnel
• Continuous monitoring for unauthorized access attempts
• Regular security updates and patches

Third-Party Access and Data Sharing

Service Providers

We work with trusted third parties who provide services such as:

• Cloud hosting and storage
• Payment processing
• Analytics
• Customer support tools

All service providers are contractually obligated to use your information only for providing services to us and in compliance with this privacy policy.

Email Service Providers

To function properly, Hermessage connects to email service providers (like Google) through their official APIs. Our access is limited to the permissions you explicitly grant during the authorization process.

Legal Requirements

We may disclose information if required by law, regulation, legal process, or governmental request.

Business Transfers

In the event of a merger, acquisition, or sale of assets, user information may be transferred as a business asset.

Your Rights and Choices

Access and Control

You can:

• Review and edit your account information anytime
• Delete templates and automated response rules
• Request a copy of your data
• Delete your account and associated data

Email Integration Permissions

• You can revoke Hermessage's access to your email accounts at any time through your email provider's security settings
• You control which email accounts to connect to our service

Marketing Communications

You can opt out of marketing communications while continuing to receive essential service notifications.

Data Retention

We retain your information only as long as necessary to provide our services and for legitimate business purposes, such as:

• Maintaining your active account
• Meeting legal obligations
• Resolving disputes
• Preventing fraud and abuse

When you delete your account, we begin a process to securely delete or de-identify your personal information within 30 days, except where retention is necessary for the above purposes.

International Data Transfers

Hermessage operates globally. Your information may be processed in countries other than your own, including the United States. When we transfer information across borders, we implement appropriate safeguards in accordance with applicable law.

Children's Privacy

Hermessage is not directed to individuals under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us, and we will take steps to delete the information.

Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or for legal reasons. We will notify you of any material changes through our website or by email.

Google Workspace API Data Usage

Hermessage accesses Gmail data solely to provide our email management and response services to individual users. We explicitly affirm that:

1. We do NOT use Google Workspace API data (including Gmail content) to develop, improve, or train generalized or non-personalized AI and/or ML models.
2. All data accessed through Google Workspace APIs is used exclusively for providing our email management service to the specific user who authorized access.
3. Hermessage strictly adheres to Google's Workspace API User Data Policy, including all Limited Use requirements.

Contact Us

If you have questions or concerns about this Privacy Policy or our practices, please contact us at:

Email: info@hermessage.ai

Specific Provisions for Different Regions

For California Residents

Under the California Consumer Privacy Act (CCPA), California residents have specific rights regarding personal information.

For European Economic Area, UK, and Swiss Residents

We comply with GDPR requirements for users in these regions.

Additional API-Specific Disclosures

Google API Services

For users who connect Gmail accounts:

1. Hermessage accesses and uses Gmail API data in accordance with Google's API Services User Data Policy, including the Limited Use requirements.
2. Our access and use of information received from Gmail APIs will adhere to these restrictions:
   • We will only use access to read, create, and manage email messages to provide email automation services as described in this Privacy Policy.
   • We will not transfer, sell, or license this data to third parties except as necessary to provide and improve our services.
   • We will not use this data for advertising purposes.
   • We will not allow humans to read this data unless:
     • We have your affirmative consent for specific messages
     • It is necessary for security purposes or to comply with applicable law
     • It is necessary to maintain and improve our service
3. You can revoke our access to your Google account at any time by:
   • Visiting your Google Account settings at https://myaccount.google.com/permissions
   • Removing access for Hermessage
   • Or disconnecting your account on the settings page