Privacy Policy

This policy describes the Google user data accessed by Hermes Backup, a private utility operated for personal, non-commercial encrypted backups.

Google data accessed

When the operator explicitly authorizes the application, rclone accesses Google Drive using the https://www.googleapis.com/auth/drive.file OAuth scope. This allows management of Drive files created or opened with the application, principally encrypted Restic backup objects and their directory structure. It is not intended to read unrelated personal Drive documents.

How data is used

The application uses Google Drive only to upload, list, download, update, and delete encrypted backup objects as required for backup, integrity checking, retention, and restoration. Restic encrypts backup content locally before rclone sends objects to Drive. The destination account belongs to the operator.

Storage, authentication, and security

Backup objects are stored in the operator's Google Drive. Restic encryption keys and password must be retained separately by the operator; Google Drive does not need the plaintext backup contents for storage. OAuth authorization credentials and operational configuration are stored on the operator-controlled backup server for unattended operation. Google and the hosting providers may process technical data according to their own applicable policies.

Sharing and limited use

Hermes Backup does not sell Google user data, use it for advertising, or transmit it to unrelated third parties. Authorized encrypted backup objects are uploaded to the operator's chosen Google Drive storage. Google user data is used only to provide this backup functionality.

Retention and deletion

Encrypted objects remain in the operator's Google Drive until removed by the operator or by an explicitly configured backup retention policy. Access can be revoked through Google Account third-party access settings. The operator can delete the encrypted repository and locally stored OAuth credentials when no longer required.

Website

These static informational pages do not contain forms, advertisements, or embedded analytics scripts. The website hosting provider may process standard technical connection information, such as IP addresses and access logs, for delivery and security.

Contact

Questions about this personal-use application may be sent to the support contact displayed in its Google OAuth consent screen.

This policy must be updated if the actual backup setup, data access, or sharing practices change.