Privacy Policy

1. Who we are

HermesRecall is operated by HermesRecall SAS, a company registered in France. We are the data controller for any personal data you provide while using the service. You can reach our data protection contact at privacy@hermesrecall.com.

2. What we collect

Account data: your email address, payment status, chosen plan, and onboarding preferences (channel, bot name).

Agent data: the messages you send to your Hermes agent, the memory it builds about you, and any files you attach. This data lives inside your private agent instance in the EU.

Technical logs: minimal request logs (timestamps, status codes) for reliability and abuse detection. Retained for 30 days then deleted.

3. What we do NOT do

We do not sell, rent, or share your data with third parties for marketing. We do not read your agent conversations. We do not use your data to train models — yours or anyone else's. Your API key to your AI provider stays encrypted on our side and is never logged.

4. Where your data lives

All agent data is stored in EU data centres (primary region: Frankfurt, Germany; backup: Paris, France). We use Hetzner Cloud and Vercel for hosting. Payment processing is handled by Stripe (EU branch).

5. Your rights under GDPR

You can access, correct, export, or delete your data at any time from the Advanced tab in your dashboard, or by writing to privacy@hermesrecall.com. We respond within 30 days. You can also lodge a complaint with your local data protection authority (for France: CNIL).

6. Retention

Agent data lives as long as your subscription is active. If you cancel, we keep it for 30 days (in case you resubscribe) then permanently delete it. Account-level data (email, invoices) is kept for 10 years to meet French accounting law.

7. Cookies

We use essential cookies only: one for session authentication, one for locale preference, one for the cookie banner state. No analytics, advertising, or third-party tracking cookies are set.

8. Changes to this policy

If we change how we handle data, we'll update this page and notify active subscribers by email at least 30 days before the change takes effect.