Privacy Policy
Hermes Bot is a personal, self-hosted Discord bot. It is not offered to the public and cannot be invited to servers by anyone other than its operator. This policy explains what the bot sees, where that data goes, and how to have it removed.
1. Who operates the bot
Hermes Bot is run by an individual, Henry Condon ("the operator"), on hardware the operator owns and physically controls. There is no company, no hosting provider holding the data, and no other staff with access. Contact: datamaxxing@gmail.com.
2. Where the bot operates
Hermes Bot is a private application. It only joins Discord servers that the operator owns or has been directly invited to by that server's administrators. It is not publicly listed or installable.
3. What data the bot accesses
Depending on which features are enabled in a given server, the bot may access:
| Category | Examples | Why |
|---|---|---|
| Message content | Text of messages in channels the bot can read, including messages that mention or reply to it | To understand and respond to requests |
| Account identifiers | User ID, username, display name, avatar | To attribute messages and address users correctly |
| Server and channel metadata | Server ID and name, channel IDs and names, roles, permissions, pinned messages | To navigate the server and respect permissions |
| Attachments | Files, images or audio shared in a conversation the bot participates in | To process content a user explicitly sends it |
The bot does not read direct messages between other users, does not access servers it has not joined, and cannot see anything Discord's own permission system hides from it.
4. How that data is processed
This is the part most likely to matter to you, so it is stated plainly.
Most processing happens locally. The bot's primary language model runs on the operator's own workstation. For those requests, message content is never transmitted off that machine.
Some tasks may use a third-party provider. Certain features — for example, audio transcription — may send the relevant content to a third-party API provider. The provider currently configured for such tasks is OpenAI. When this happens, the content sent is handled under that provider's own terms and privacy policy.
Which path a given request takes depends on the feature invoked. If you would rather nothing you write be eligible for third-party processing, do not interact with the bot.
5. What is stored, and for how long
The bot keeps conversation and session state in a local database file on the operator's workstation, so that it can follow the thread of a conversation across messages. This storage is local disk on personal hardware; it is not a cloud database and is not replicated to any external service.
There is no fixed retention schedule. Data is kept while it is useful for the bot's operation and is deleted on request, or when the operator prunes local state.
6. What the operator does not do
- Your data is never sold, rented, or licensed.
- It is not used for advertising or profiling.
- It is not shared with third parties except the model providers described in section 4, and only as needed to fulfil a request.
- It is not used to train any publicly released model.
7. Your choices and requests
You can ask what is stored about you, ask for it to be deleted, or ask that the bot stop processing your messages entirely. Email datamaxxing@gmail.com from an address you can be reached at, and include your Discord username or user ID so the right records can be found. Requests are handled within 30 days.
You can also remove your data from the bot's reach at any time by leaving the server, or by asking a server administrator to remove the bot.
8. Security
Data sits on personal hardware under the operator's physical control, protected by standard operating-system account security and full-disk access controls. No system is perfectly secure, and no guarantee of absolute security is offered.
9. Children
Discord requires all users to be at least 13 years old, or older where local law sets a higher minimum. The bot is not directed at children and the operator does not knowingly collect data from anyone below Discord's minimum age. If such data is identified, it will be deleted.
10. Changes to this policy
If this policy changes materially, the date at the top of this page will be updated. Continued use of the bot after a change constitutes acceptance of the revised policy.
11. Contact
Questions, deletion requests, or complaints: datamaxxing@gmail.com.