Legal
Privacy Policy
Last updated: 23 September 2026
This policy explains how ReadyHermes ("ReadyHermes", "we", "us") handles personal data when you visit readyhermes.com or use your hosted Hermes Agent. ReadyHermes is the controller of the personal data described here.
We keep this short and plain. If anything is unclear, email us at support@readyhermes.com.
1. Data we collect
Account data. Your email address and password when you sign up. Passwords are stored only as a salted hash; we never see or store them in plain text.
Your agent's content. The messages and files you send to your Hermes Agent, its replies, and what it keeps to work for you: long-term memory, skills it has learned, scheduled tasks and custom instructions. This is stored in the private environment dedicated to your account.
Connected apps. If you connect your agent to Telegram, WhatsApp, Discord, WeChat or Feishu/Lark, we store the credentials needed for that connection (for example a bot token or a linked session) and process the messages exchanged through it.
Usage information. Records of how much of the service your agent uses, so we can run the free plan fairly and keep the service reliable.
Website analytics. When you visit readyhermes.com we log which page you viewed, when, your device type (desktop, mobile or tablet), your browser's language setting and the website that referred you. To count unique visitors we store a one-way hash of your IP address and browser identifier combined with a secret that changes every day. The hash cannot be turned back into your IP address or linked across days, and we do not store your IP address in this log. These records are deleted after 120 days.
Server logs. Like any website, our servers record technical request information such as IP address, time and requested address for security, abuse prevention and troubleshooting. These logs are kept for a limited period.
Support messages. If you contact us, we keep your message and our reply.
2. How we use it and our legal bases
- To provide the service (performance of our contract with you): creating your account, running your Hermes Agent, delivering its replies, running your scheduled tasks and connecting the apps you choose.
- To keep the service safe and working (our legitimate interests): preventing abuse and fraud, enforcing fair-use limits, securing our systems and fixing problems.
- To understand and improve the website (our legitimate interests): the aggregated, privacy-preserving analytics described above.
- To meet legal obligations (legal obligation): for example responding to lawful requests from authorities.
3. How your messages are processed by AI
Hermes Agent is open-source software created by Nous Research. To generate a reply, the content of your conversation (and relevant memory) is sent to a third-party large-language-model provider, for example through a model routing service such as OpenRouter to the developer of the underlying model. When your agent searches the web, your search query is sent to search engines through our search service.
We do not use your conversations to train AI models ourselves, and we do not sell your personal data. Please avoid sharing sensitive information (such as health data, passwords or payment card numbers) with your agent unless you need to.
5. International transfers
Your account and agent data are hosted in the European Union. Some AI model providers are located outside the UK and EU, for example in the United States. Where personal data is transferred to such countries we rely on adequacy decisions or on appropriate safeguards such as the UK International Data Transfer Agreement or the EU Standard Contractual Clauses.
6. How long we keep data
- Account data and your agent's content are kept while your account is active.
- When you delete your account, your Hermes Agent and the data stored in it are deleted. Residual copies in our backups are removed as backups rotate.
- Website analytics records are deleted after 120 days.
- Support correspondence is kept for as long as needed to help you and for our records, typically no longer than two years.
8. Your rights
Under UK and EU data protection law you have the right to access your personal data, to correct it, to have it deleted, to restrict or object to how we use it, and to receive it in a portable format. You can export your data and delete your account yourself from your account settings, or email us at support@readyhermes.com. We will respond within one month.
If you are unhappy with how we handle your data, please contact us first. You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk) or to the data protection authority where you live.
9. Security
Each account's Hermes Agent runs in its own isolated environment. Traffic to readyhermes.com is encrypted with HTTPS, passwords are hashed, and access to our infrastructure is restricted. No system is perfectly secure, so please use a strong, unique password.
10. Children
ReadyHermes is not intended for anyone under 18, and we do not knowingly collect data from children. If you believe a child has created an account, contact us and we will delete it.
11. Changes to this policy
We may update this policy from time to time. We will change the "last updated" date above and, for significant changes, notify you by email or in the product.
12. Contact
ReadyHermes. Email: support@readyhermes.com. See also our Terms of Service.