Privacy policy.
Summary. Hermes Job Alerts is a private, personal job-search tool. It uses read-only Gmail permission to process job-alert emails for its authorised owner. The public website is not an inbox or a login portal.
1. Who operates this app
Hermes Job Alerts is a personal, non-commercial project operated by its owner. For privacy questions, corrections or data-deletion requests, email ismaaeelahmed11@gmail.com.
2. What Gmail permission is requested
The application requests https://www.googleapis.com/auth/gmail.readonly. This permits viewing and searching Gmail messages and viewing mailbox settings and labels. It does not authorise sending, modifying or deleting email.
Google grants read-only access at the mailbox level, not solely to one label. The application enforces a narrower processing rule in its own software: it searches for the exact “Job Alerts” label and only retrieves messages returned from that label. If the label is unavailable, the intake fails closed instead of scanning the Inbox.
3. What data is processed and why
Within designated job-alert emails, the tool may process Gmail and email message identifiers, message dates and subjects, message bodies containing job listings, employer names, job titles, locations, application URLs and any salary or requirements stated in the listing.
This information is used only to organise the owner's job search: extracting vacancies, preventing duplicates, checking suitability against a locally maintained skills profile, and generating job-search summaries. A job mentioned in an email is treated as unverified until its availability is checked separately.
4. Where information is stored and retained
The intake runs in a local computing environment controlled by the owner. It stores relevant extracted vacancy records, identifiers, timestamps and processing checkpoints locally so jobs can be tracked and not repeatedly processed. Gmail OAuth credentials are stored in private local files with restricted access permissions.
Raw Gmail MIME messages are not retained by default. Optional failure diagnostics, if enabled by the owner, may retain limited copies in private local storage subject to configured limits. Such optional cleanup occurs when the relevant maintenance process runs; it is not a guarantee of immediate deletion.
Locally saved job-search records remain until the owner deletes them or changes the tool's retention configuration. The owner can delete the local job-alert data and revoke access at any time. The public website does not hold the owner's mailbox, messages or OAuth credentials.
5. Sharing and external services
The tool communicates with Google's Gmail API to read authorised alerts. If job-verification features are enabled, it may contact official employer websites to confirm whether listed jobs are still available. If AI-assisted assessment is enabled, extracted job-listing information may be submitted to the AI provider selected and configured by the owner for that job-search function. If Telegram delivery is enabled, selected job summaries may be transmitted through Telegram to the owner's chosen chat. The owner is responsible for reviewing the data practices of any enabled external service.
Gmail-derived information is not sold, supplied to advertisers, used for advertising targeting, or used by this app to build or train general-purpose AI models. Information is used or transferred only as needed to provide the owner's requested job-search functions, with consent, or where required for security or legal obligations.
Use of information received from Google Workspace APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.
6. Website and hosting
This public site is a static informational website hosted using Cloudflare infrastructure. It does not provide Gmail login, accept uploaded inbox contents, or use an application-specific analytics or advertising script. The hosting provider may process standard connection data when serving the site under its own policies.
7. Security and control
Read-only OAuth permission, restricted local credential file permissions, label-scoped processing, and bounded fetching are intended to limit access and exposure. No online system is completely risk-free. Authorised users should protect their device and account credentials, and regularly review connected-app permissions.
8. How to stop access or request deletion
- Visit Google Account → Third-party connections, locate “Hermes Job Alerts”, and revoke access to stop further Gmail API access.
- Stop or disable the local job-intake automation to prevent further processing.
- Delete saved job-search lead files, processing checkpoints and OAuth token files from the local environment if no longer needed.
- For assistance concerning this project, contact ismaaeelahmed11@gmail.com.
9. Changes to this policy
This policy may be updated if the project's features, data flows, or legal requirements change. The revision date shown at the top will be updated when the policy changes.