Privacy Policy

Information Hermes handles

Depending on the features you use, Hermes may handle:

• Photos and artwork: images you select or import into Photo Vault, plus generated previews, mockups, and print files.
• Creator content: slideshow text, captions, hashtags, Pin preparation fields, draft associations, and selected preferences.
• Shop information: Etsy listing metadata and, when you request relevant Home, Orders, or Analytics views, information returned by Etsy through the configured Hermes backend.
• Pinterest connection and publishing data: if you connect Pinterest when the feature is enabled, Hermes processes the OAuth authorization response, granted permissions, Pinterest board names and IDs, and publishing results. When you explicitly publish, Hermes sends the selected mockup image, Pin title, description and hashtags, destination link, and selected board ID to Pinterest through the Hermes backend.
• Connection data: an authenticated session credential supplied to the app for requests to the configured Hermes backend. In the inspected iOS code, this credential is passed to the native Library session in memory for authenticated requests.
• Operational diagnostics: the app and backend can record request outcomes, errors, and operational events. The inspected iOS target contains no advertising or third-party analytics SDK; this source review cannot rule out infrastructure-level logging by the live host or network providers.

Hermes does not need access to your entire Photos library to import an image: you select images through Apple's system picker. Saving exports to Photos uses the system's add-only permission.

How information is used

Hermes uses selected images and the content you enter to create previews, mockups, slideshow exports, and saved drafts. Local editing and rendering happen on your iPhone where the feature supports it. When you use connected features, the app sends the necessary request and content to the Hermes service. If direct Pinterest publishing is enabled, Pinterest data is used only to connect your authorized account, show its available boards, and create a Pin after you confirm publication.

The inspected backend stores app state, configuration, generated files, and service credentials in files under its configured data root; some Hermes orchestration records are JSON files. The deployment template mounts that root as persistent storage. The code does not define a universal retention schedule. Etsy requests are made by the backend using its Etsy integration, and Etsy handles submitted information under its own terms and privacy notice.

The app's Analytics views are for Etsy shop information returned by the connected service. They are not a claim that Hermes tracks your behavior for advertising.

Where information is stored

Photo Vault images, creator drafts, preferences, and related local records are stored in Hermes app storage on the device. The original app also uses its configured iOS App Group for data shared with its extension. Removing an item in Hermes affects the local record and files covered by that action; it does not necessarily remove a corresponding Etsy listing or backend copy.

The reviewed cloud deployment template stores service data on a persistent host volume mounted into the Hermes service. The repository does not identify the live hosting provider or the physical region used for the deployed volume. The source also does not specify a fixed retention period, backup lifetime, or automatic deletion schedule for all backend records and logs. These details depend on the operator's active deployment.

Etsy authorization tokens are read from backend-side credential files for Etsy API requests. The app uses a separate bearer credential to authenticate with Hermes; the iOS code passes that credential to native request code in memory. This review does not establish that Etsy credentials are stored in the iOS Keychain or encrypted at rest on the backend.

For direct Pinterest integration, the Pinterest authorization code is exchanged by the Hermes backend. Access and refresh tokens are kept in a backend-side file created with owner-only file permissions; the Pinterest App Secret is configured server-side and is not included in the iOS app or returned to it. The publishing request processes the selected image in memory and sends it to Pinterest. Hermes keeps a limited request record to prevent duplicate publishing; it stores a request digest and any Pinterest Pin ID returned, not a second copy of the image or Pin text. The source does not establish encryption at rest or a fixed retention period for these records.

Third-party services and sharing

Hermes works with services you choose to connect or open, including Etsy. Their handling of information is governed by their own privacy terms. Hermes does not control those services.

• Etsy: shop and listing information may be requested through the connected backend. Listing content and files are sent to Etsy when you use an Etsy workflow. Hermes source supports preparing Etsy drafts; publication or other Etsy actions depend on the specific feature and your confirmation.
• Apple Photos: selected images can be imported from Photos, and exports can be saved to Photos if you grant permission.
• System sharing: when you choose a sharing destination, iOS passes the selected item to that destination. Hermes also retains manual image sharing as a fallback when direct Pinterest publishing is unavailable.
• Pinterest: if you connect Pinterest and use direct publishing, Hermes uses the permissions you authorize to retrieve available boards and create a Pin on the board you select. At publish time, the selected mockup, title, description including hashtags, and destination link are sent to Pinterest. Pinterest processes and stores a successfully created Pin under its own terms and privacy notice.
• ChatGPT: if you choose ChatGPT in the share interface, the selected image and prepared prompt are handed to that app. Hermes does not make an OpenAI API request for this handoff.

Pinterest integration

When enabled, Hermes connects to Pinterest through its official API using an authorization-code flow. Hermes requests permission to read available boards and create Pins (boards:read and pins:write). It does not request permission to read Pins or access secret boards in this flow. The Pinterest App Secret and account tokens remain on the Hermes backend; they are not embedded in the iOS app. Hermes receives board metadata and the result of a publish request, not the account access token.

When you confirm publishing, Hermes sends Pinterest the exact selected mockup, your Pin title, description and hashtags, your selected board ID, and the associated destination URL. For a Hermes Etsy poster, that URL is checked against its linked Etsy listing. A Pin is not created until you take the explicit publish action and Pinterest returns a Pin identifier. A connection or publish attempt alone is not a successful publication.

Pinterest Trial access may create sandbox Pins that are visible only to the creator; public Pins require the appropriate Pinterest access level. Pinterest controls its own processing, storage, visibility, and deletion of Pins. Hermes currently does not delete Pins from Pinterest. To remove a created Pin, use Pinterest. Hermes can remove its locally stored Pinterest tokens when you disconnect, but this does not revoke Pinterest's authorization; also remove Hermes from your Pinterest account settings to revoke access there. If the direct API feature is not enabled on your current backend, the existing manual share flow remains available and Pinterest decides which fields it accepts.

Security

Hermes uses HTTPS for its configured public backend and requires authentication for mobile API operations, including Pinterest connection and publishing. Pinterest OAuth tokens are stored server-side with owner-only file permissions. Source inspection does not establish encryption at rest, the live host's security controls, backup protection, or access by the hosting provider.

Backend logs may contain operational events, request outcomes, identifiers, or error details. The source does not establish the live log destination or retention period. Keep your device secure and do not send passwords or access tokens in support requests.

Your choices and account disconnection

You choose which photos to import, what content to create, and whether to use system sharing or connected Etsy features. A paired mobile device can be revoked through Hermes' device-management controls. Etsy authorization is managed by the operator from backend-side credentials and can also be revoked with Etsy; local app removal does not itself revoke it. You can disconnect Pinterest in Hermes to remove Hermes' stored Pinterest tokens. To revoke the authorization at Pinterest, also remove Hermes from your Pinterest account settings.

Signing out of or removing Hermes from your iPhone does not necessarily remove backend records or information already held by Etsy, Apple, Pinterest, or another service.

Data deletion requests

Hermes provides feature-specific controls to remove some local posters, drafts, and files. The reviewed source does not provide a single account-wide deletion action that removes every device, backend, backup, and third-party copy. Deleting local content may not delete Etsy listings, backend files, logs, or third-party records.

To ask the operator about access to or deletion of information held by Hermes, use the privacy contact below. The operator will need to confirm identity and determine what information can be removed, including any copies subject to the deployment's backup and retention configuration. Do not include passwords or access tokens in a request.

Contact