OlympusHermes

Transparency & control

Privacy policy

Effective date: 9 October 2026 · Last updated: 9 October 2026

OlympusHermes is a personal backup and recovery utility operated by Flason Nguyen. This policy describes the backup utility’s Google Drive connection and this informational website. It does not describe every data-processing feature of the separate personal assistant being backed up.

1. Information used

The account owner selects local data for backup. This may include assistant configuration, curated memories, project documents, conversation databases and credentials needed for recovery. The utility encrypts this material locally before uploading it to Google Drive.

The utility stores OAuth authorization tokens and client configuration on the owner-controlled server to maintain the authorized Drive connection. It accesses file identifiers, metadata and encrypted contents for the backup repository. The recovery password is stored separately from the Drive repository and must also be kept independently by the owner.

2. Google permissions and purpose

OlympusHermes requests https://www.googleapis.com/auth/drive.file. This permits access to files the application creates or that the user explicitly grants to the application. The configured backup flow uses this permission to create the encrypted repository, upload snapshots, download data for verification or recovery, and remove repository data as part of retention.

The application does not request Gmail, Contacts or Google Photos access. It does not use the Drive connection to browse unrelated personal files. It uses Google user data only to provide and maintain the requested backup and recovery functionality.

3. Storage and protection

Restic encrypts backup contents and repository metadata before upload. Google Drive stores the encrypted repository in the authorized account. Temporary snapshots and a prepared recovery copy on the owner’s server are not encrypted by Restic at rest; filesystem permissions restrict access. Authorization credentials are kept outside the public website and outside the uploaded backup repository.

Encryption depends on safeguarding the recovery password. Loss of that password may make backups unrecoverable. No storage or security measure can guarantee protection against every risk.

4. Sharing and use restrictions

The backup utility transfers encrypted repository data to Google Drive. It does not sell Google user data, use it for advertising, or use backup data to train AI models. Routine backups do not call an AI model. Separate use of the personal assistant may involve model providers and is outside this backup utility’s scope.

If failure notifications are enabled, the utility sends a short operational alert through Telegram. Alerts do not include backup contents, Google tokens or recovery passwords. The server operator can access local source data for administration and recovery.

OlympusHermes’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.

5. Retention and deletion

The configured retention policy keeps seven daily, four weekly and three monthly snapshots; these categories may overlap. Older snapshots are removed according to that policy after successful backup and integrity checks. A retained snapshot may still contain a file deleted from the live system.

The owner can stop future backups and request deletion of the backup repository and local prepared copies. Revoking Google access does not delete existing backups. Items placed in Google Drive Trash may require separate removal; Google’s storage and deletion policies also apply. Other independently configured backups, such as a separate source repository, are not deleted by this utility.

6. Your controls

You can revoke OlympusHermes access through your Google Account connections. This prevents future authorized access but may cause scheduled backups to fail. Contact flasonnguyen@gmail.com to ask about access, correction, export or deletion. Do not send passwords, authorization tokens or private backup files by email.

7. This website

This website provides information and contact links. Its application code does not add analytics, advertising trackers, forms or browser storage. The hosting provider may process ordinary request information, such as IP addresses, user-agent details and security logs, to deliver and protect the site. Sending an email shares the information you include with the operator and the email service providers involved.

8. Changes and contact

Material changes to this policy will be reflected on this page with an updated date. For questions about OlympusHermes or this policy, contact the operator:

Flason Nguyen
flasonnguyen@gmail.com