1 · Your agent's home
TL;DR. A managed private environment assigned to your agent.
Each agent runs in managed private infrastructure provisioned for that customer. Other customers' agents do not share its agent data store. Your agent's memory is encrypted at rest.
2 · What we store
TL;DR. Conversations live on your server, not ours.
- On your server: your conversations, your agent's long-term memory, the routines it runs, and a short technical log of what it did.
- In our control plane: your Ermes account email, subscription state, server status, and the basics needed to operate the platform.
- For billing: Stripe collects your billing name, address, payment details, and any tax ID you choose to provide. We receive identifiers and status needed to reconcile subscriptions, invoices, refunds, and tax records; full card numbers go directly to Stripe and are not available to us.
- Not stored in our shared control-plane database: the contents of your chats and memories. Connector content can pass through the control plane when needed to deliver a feature to your dedicated server or model provider; the Google-specific processing and storage are described below.
2a · Your memory is inspectable — not a black box
TL;DR. See what your agent knows, correct it, or make it forget — because the memory is yours.
- See it: your dashboard shows a live meter of exactly how much context your agent holds — per source, counted, timestamped. Or just ask it: "what do you know about me?"
- Correct it: tell your agent a remembered fact is wrong and it updates the record.
- Forget it: tell it to forget a topic, a person, or a whole source. The deletion happens on your server, where the data lives.
This works because memory is kept in the private data store assigned to your agent. Access is restricted to the account and to authorized operational access described below.
3 · Model providers
TL;DR. The model API only sees what it needs to answer.
Ermes sends the context needed to answer a request to the model service connected or configured for your agent. The BYO plan uses your eligible ChatGPT connection. The model provider's terms, limits, and data practices apply to that traffic.
4 · Permissions
TL;DR. Anything that touches the world asks first.
Sensitive actions — sending messages, paying, scheduling, deleting — stage themselves and ask before they run. You can revoke any permission, any tool, any time.
4a · Google Workspace data
TL;DR. Gmail is accessed only when you ask Ermes to use it. It is never sold, used for ads, or used to train general-purpose AI models.
In this Gmail-only production release, connecting a Google account lets Ermes access the Google account address and the specific Gmail data covered by the permissions shown on Google's consent screen:
- Gmail read/search: message metadata and content needed to answer the Gmail question you ask in the current turn.
- Gmail drafts: recipient, subject, thread, and body data needed to create a draft only after you approve its exact text. Ermes does not send email.
Relevant Gmail content may be transmitted to your dedicated agent server and to the model provider configured for your agent solely to perform that request. Connecting Gmail does not start a background import, scheduled mailbox scan, or automatic durable-memory save in this release. Ermes saves Google-derived content into durable memory only if you separately ask it to save that specific information. The connector's central database stores the connected account address, granted permissions, connection-health metadata, and an encrypted Google refresh token; short-lived access tokens and Gmail message content are not retained there.
We do not sell Google user data, use it for advertising, use it to determine creditworthiness, or allow humans to read it except with your affirmative permission for support, when necessary for security, or when required by law. We do not transfer it to third parties except to provide the features you requested, with your consent, or for the limited security, legal, or corporate-transfer cases allowed by Google's policy.
You can disconnect Google from the Connectors page. Disconnecting revokes the Google authorization where Google permits it and removes the stored connector credentials, which stops future access. Information you separately asked Ermes to save remains in your agent memory until you delete it, ask Ermes to forget it, or delete your account. Account deletion removes the dedicated server within 7 days. You can also revoke Ermes directly from your Google Account connections.
Ermes's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.
5 · Export & delete
TL;DR. One-click delete. JSON export anytime.
You can export the full memory + routine library as JSON. You can delete everything in one click; we wipe the server within 7 days.
6 · Operational access
TL;DR. Restricted to authorized people and legitimate operational needs.
Authorized Ermes operators may access technical systems when needed to provide support, maintain security, investigate an incident, or comply with law. We limit that access to what is necessary and do not permit staff to browse customer conversations for unrelated purposes.
7 · Sub-processors
TL;DR. Short list. 30-day notice before adding any.
We list the third parties we rely on (server provider, DNS, payment, email) on our sub-processors page. Stripe processes billing identity and payment data for payment processing, invoicing, fraud prevention, refunds, and tax compliance, and retains it under its legal and contractual obligations. We'll email you 30 days before adding any new sub-processor.
8 · Legal & contact
TL;DR. Polish controller. GDPR rights apply.
Data controller: DMT SP. Z O.O. (DMT SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ), ul. Budowlanych 1A, 62-081 Baranowo, Poland; KRS 0000836521, NIP 7812007881, REGON 385877414. DMT SP. Z O.O. operates Ermes at getermes.ai. For privacy questions, use the form on our contact page or write to [email protected]. Where the GDPR applies, your rights include access, correction, deletion, restriction, objection, and portability, as provided by law.
9 · Cookies
TL;DR. Strictly necessary only. No third-party trackers.
The marketing site uses a couple of strictly-necessary cookies to remember your session and your preferences. We don't run third-party advertising or analytics trackers. If we ever add analytics, we'll ask first and let you say no.