Privacy Policy

1. Introduction

MyHermes ("we", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, share, and protect your personal data when you use our service. It also describes your rights regarding your data.

MyHermes is a data processor for the content your agent processes. The specific data you process through Hermes (messages, files, prompts, outputs) is data you control — we treat it as your property.

2. Data we collect

Account data: When you sign up, Clerk collects your email address and authentication data. We receive your email to manage your account and send transactional messages (confirmations, billing receipts, important notices).

Payment data: Dodo Payments processes all subscription payments. Card numbers and payment instrument details are handled directly by Dodo Payments on their servers — MyHermes never sees or stores raw payment card data.

Instance and usage data: We collect metadata needed to operate your container and bill you accurately: instance configuration (subscription tier, region), usage metrics (message counts, tool executions, cron firings), and operational logs generated by the platform during normal operation.

If you try MyHermes by voice without an account, your browser turns your speech into text using its own speech service (in Chrome, that is Google's, so your audio may leave your device but never reaches us). What you say is sent to our AI model provider, OpenRouter, to reply to you, and OpenRouter and the model it uses may keep it briefly under their own policies. We keep the conversation and a short list of what you told us for a short time after the trial ends, then delete it. To speak its replies aloud, we send the text of each MyHermes reply to Replicate, which runs an ElevenLabs voice model; your own words are not sent there.

If you turn on voice mode in Settings, the same thing happens: your browser turns your speech into text with its own speech service (in Chrome, that is Google's), and the text goes to your own agent like a message you typed. Your browser reads the replies aloud, unless you pick the MyHermes AI voice in Settings. Then we send the text of each reply to Replicate, which runs an ElevenLabs voice model; on the web, your own words are not sent there.

The MyHermes desktop app has no browser speech service, so it asks you once before it listens. If you turn on paid listening, we send a recording of what you say to Replicate, which runs an OpenAI speech-to-text model, and the text goes to your agent like a message you typed. The app only records after you press Call or say "Hey Hermes", and it stops when you stop talking. We don't store the recording; we keep its length and a fingerprint of the file for billing, and the text of what you say is kept like any message you type. If you choose Type instead, no audio leaves your computer.

"Hey Hermes" is off until you turn it on from the desktop app's tray. When it's on, the app listens for the phrase on your computer. That check runs on your device, and no audio leaves it until the phrase is heard. It doesn't respond while your screen is locked or while a call is already going.

With Faster calls on, a recording of each question you speak in a call is sent through MyHermes AI to OpenRouter, and on to OpenAI's audio model, which hears it and speaks the answer. Faster calls is on by default for agents that use MyHermes AI, and you can turn it off in Settings. OpenRouter and OpenAI may keep the recording briefly under their own policies.

Agent content: All content your Hermes agent processes — prompts, responses, files, and any data stored on your dedicated volume — is stored on your private container volume. We do not access, read, analyse, or log the contents of your agent's activity.

LLM API key: Your LLM API key is stored encrypted at rest on your container volume. It is used only by your Hermes agent to make inference requests to your chosen provider. We never log, transmit, or use your API key for any purpose other than operating your agent.

3. How we use your data

We use your data solely to:

• Create and maintain your account (via Clerk)
• Process subscription billing (via Dodo Payments)
• Provision, operate, and bill your container (Convex + compute provider)
• Send transactional emails — account notices, billing receipts, and material service announcements (via Resend)
• Detect and respond to security incidents and abuse

We use anonymised, aggregated usage metrics to understand how the service is used and to prioritise improvements. Aggregated data cannot be linked back to you.

4. Data retention

Your account data (email, billing records) is retained for the duration of your account plus any legally required retention period after deletion.

Your agent content on the container is retained until you cancel or we terminate the service. When cancellation takes effect, we attempt to create a recovery backup and promptly destroy the container; if automated cleanup fails, destruction may take up to 7 days. A post-cancellation recovery backup may be retained for up to 30 days, then permanently deleted.

Operational logs are retained for up to 30 days for troubleshooting and security purposes.

5. Data sharing and sub-processors

We do not sell your personal data. We share your data only with the following sub-processors, solely to provide the service:

• Clerk — Authentication and identity management. Their privacy policy applies to the data they collect.
• Dodo Payments — Payment processing. They act as the data controller for payment data. Their privacy policy governs their handling of your payment information.
• Convex — Control plane database for account and instance metadata. Their privacy policy is available at convex.dev/privacy.
• Fly.io / Modal — Compute infrastructure (container hosting). Your container data resides on their servers while your subscription is active.
• Resend — Transactional email delivery. Their privacy policy is available at resend.com/privacy.
• Vercel — Web hosting for the MyHermes dashboard and landing pages.
• OpenRouter: if you turn on Auto in the chat model picker, TypeSafe reads the text of each message, and up to three earlier messages in that chat, through this provider to choose which model answers. On Telegram this can include the words of a voice note, a description of a picture, or the text of a document you send. For the anonymous voice trial, this provider receives the text of what you say so the AI model can reply. With Faster calls on, it receives a recording of each question you speak in a call and passes it to OpenAI's audio model.
• Replicate: only if you use Era Photos, the voice trial, the MyHermes AI voice or paid listening in the desktop app. It receives the photo you upload and runs the image model that makes your picture. Their privacy policy is available at replicate.com/privacy. For the voice trial or the MyHermes AI voice, it receives the text of MyHermes's replies and returns spoken audio. For paid listening, it receives the recording of what you say and returns the text.
• Google: only if you use Era Photos. Replicate runs an image model made by Google to restyle your photo, and Google's terms apply to that model.
• ElevenLabs: only for the voice trial or the MyHermes AI voice. Replicate runs an ElevenLabs voice model to read MyHermes's replies aloud, and ElevenLabs's terms apply to that model.
• OpenAI: for paid listening in the desktop app and for Faster calls. For paid listening, Replicate runs an OpenAI speech-to-text model to turn your recording into text. With Faster calls on, a recording of each question you speak in a call goes to OpenAI's audio model, which hears it and speaks the answer. OpenAI's terms apply to those models.
• Cloudflare R2: storage for the photos people upload to Era Photos and the pictures made from them. Their privacy policy is available at cloudflare.com/privacypolicy.

When your Neo Pass is used up, Hermes may answer from shared everyday models run by third parties. Those providers may keep prompts under their own policies. Do not put sensitive work in those requests.

Era Photos: On myhermes.cloud/eras you can upload a photo of yourself to see it restyled in another era. By uploading, you confirm the photo is of you and that you are 18 or older. We send the photo to Replicate, which runs an image model made by Google to make the new picture. We ask Replicate to delete its copy once the picture is made; Replicate may keep prediction data for a short time under its own policy. If a picture is made, we keep your photo and the picture in our storage on Cloudflare R2 so you can download it after you sign up, and to improve the feature. If no picture is made, we do not keep your photo. Before you sign up you see only a watermarked preview. We keep these photos until you ask us to delete them: email [email protected] from the email you signed up with, or include the link to your photo, and we will delete your photo and every copy we made from it. Three kinds of cookie from us support free photos: one lasts a day and stops a second free photo in that browser, one lasts a year and counts free attempts from that browser, and one for each photo lasts 30 days so you can download that photo later in the same browser. We record your IP address to rate limit free photos.

We will update this list if we add or replace sub-processors. Material changes will be communicated via email to active subscribers at least 30 days before they take effect.

6. International transfers

MyHermes operates primarily on infrastructure hosted in India and the United States, with compute regions that may vary based on your geographic location. Your data may be transferred across borders as necessary to provide the service. Where data is transferred outside India, we rely on standard contractual clauses or equivalent legal mechanisms to ensure adequate protection.

7. Data security

We use encryption at rest (AES-256) for your LLM API key and sensitive instance data. All traffic between your client and MyHermes is transmitted over TLS. Access to our internal systems is restricted to authorised personnel on a least-privilege basis.

No security measure is completely impenetrable. If you become aware of a security vulnerability in our service, contact us immediately at [email protected].

8. Cookies and tracking

We use minimal cookies for authentication (Clerk) and for anonymously measuring how visitors use our landing and dashboard pages (PostHog). We do not use advertising trackers or cross-site tracking. You can opt out of PostHog analytics by contacting us.

Era Photos sets three kinds of first-party cookie. One lasts a day and stops a second free photo in that browser. One lasts a year and counts free attempts from that browser. One for each photo lasts 30 days and lets you download that photo later in the same browser. They are used only for free photos.

If you start the voice trial, we set two cookies: mh_trial, which links your browser to the trial and expires shortly after the trial ends, and mh_dev, a random identifier kept for one year that limits each browser to one trial a day. To enforce the same limit, we keep a record of your IP address and that identifier for a short time.

9. Your rights

Depending on your jurisdiction, you may have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate data
• Deletion — request deletion of your account and associated data
• Portability — request your data in a structured, machine-readable format
• Objection — object to certain processing activities

To exercise any of these rights, email [email protected]. We will respond within 30 days. For data that Clerk or Dodo Payments holds directly, we will redirect you to them.

10. Children's privacy

MyHermes is not intended for users under 18. We do not knowingly collect data from minors. If we become aware that we have collected data from a minor, we will delete it promptly.

11. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated by email to active subscribers at least 30 days before they take effect. The "Last updated" date at the top of this page reflects the date of the most recent update.

12. Contact

For privacy-related questions or to exercise your rights, contact [email protected].