Effective August 24, 2026
Privacy policy
Hermes Backup is a private application operated by Dustin Shiers for personal backup and disaster-recovery purposes. It is not offered as a public service.
Google data accessed
The application requests the Google Drive drive.filescope. This permits it to create, read, update, and manage only the Drive files and folders it creates for the backup repository. It does not request access to unrelated Drive content.
How the data is used
Google Drive access is used exclusively to create and maintain an encrypted off-site Restic repository, confirm copied backup snapshots, perform integrity checks, and test recovery. Google user data is not used for advertising, profiling, analytics, or training machine-learning models.
Storage and security
Backup data is encrypted before upload. The OAuth refresh token is stored in an encrypted, access-restricted configuration on the owner’s private server. Credentials are not committed to public source control or included in operational logs.
Sharing and disclosure
Google user data and OAuth credentials are not sold, rented, or shared with third parties. Data may be disclosed only when required by applicable law.
Retention and deletion
Encrypted backup files are retained according to the owner’s backup retention policy. They may be deleted from Google Drive when no longer required. Revoking the application’s access prevents future access but does not itself delete existing encrypted backup files.
Control and revocation
Access can be reviewed or revoked at any time from the connected-app controls in the owner’s Google Account. Questions may be directed to the support address displayed on the Google OAuth consent screen.
Google API Services User Data Policy
Hermes Backup’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.