Privacy Policy

1. Introduction

Hermiis ("we", "us", or "our") operates the Hermiis project management platform available at hermiis.com and related subdomains (the "Service"). This Privacy Policy describes how we collect, use, store, and share information when you use our Service.

By using Hermiis you agree to the collection and use of information in accordance with this policy. If you do not agree, please discontinue use of the Service.

2. Information we collect

2.1 Information you provide

• Account information: email address, name, and avatar when you register.
• Workspace content: tasks, features, descriptions, comments, file attachments, decisions, and documents you create inside the Service.
• GitHub integration data: repository names, commit messages, pull request titles, and file structures for repositories you explicitly connect to Hermiis. We do not store repository source code beyond what is needed to generate AI context.
• Communications: any messages you send us via email or support channels.

2.2 Information collected automatically

• Usage data: page views, feature interactions, timestamps.
• Log data: IP addresses, browser type, operating system, and error reports.
• Cookies and local storage: session tokens and UI preferences (e.g., sidebar collapsed state). We do not use advertising cookies.

3. How we use your information

• To provide, maintain, and improve the Service.
• To generate AI-powered task suggestions, semantic search results, and decision recommendations. Your content is processed by Claude (Anthropic) under our API agreement. See §6 for sub-processors.
• To create and maintain vector embeddings of your workspace content for semantic search (stored in our PostgreSQL database with pgvector).
• To send transactional emails: account confirmation, password reset, and notifications you have opted into.
• To detect and prevent abuse, fraud, and security incidents.
• To comply with legal obligations.

4. Data retention

We retain your account data for as long as your account is active. Workspace content (tasks, documents, etc.) is retained until you explicitly delete it or close your account. Deleted content may remain in backups for up to 30 days. Server logs are retained for up to 90 days.

5. Data sharing

We do not sell your personal data. We share data only in the following circumstances:

• Within your workspace: content you create is visible to workspace members you invite.
• Sub-processors: see §6 for the list of third-party services we use.
• Legal requirements: we may disclose data if required by law or to protect our rights.
• Business transfers: in the event of a merger or acquisition, data may be transferred as part of that transaction.

6. Sub-processors

7. Security

We implement industry-standard measures including TLS encryption in transit, bcrypt password hashing, and scoped database access. However, no method of transmission or storage is 100% secure. We encourage you to use a strong, unique password and report any suspected security issues to security@hermiis.com.

8. Your rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your account and associated data.
• Object to or restrict processing.
• Data portability (export of your workspace content).

To exercise these rights, contact us at privacy@hermiis.com.

9. Children's privacy

The Service is not directed to persons under 16. We do not knowingly collect data from children. If you believe a child has provided us with personal data, please contact us immediately.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by a prominent notice within the Service at least 14 days before the change takes effect. Continued use of the Service after the effective date constitutes acceptance of the updated policy.

11. Contact

Questions about this policy? Contact us at:
aomega.co
Austin, Texas, USA
privacy@hermiis.com