Hermes privacy policy
Hermes helps you purchase and manage Output Sense script access and helps server staff manage subscription roles and moderation. For privacy, access, correction, deletion or abuse reports, email b.group.main@gmail.com.
Information we use
- Discord: user, server, channel, role and message IDs; membership and permissions; commands and selections you submit; and moderation actions and timestamps. We use these to deliver your requests, synchronize subscription roles and enforce server rules.
- Management website: Discord sign-in identifies your account. We check current server permissions before showing or saving settings, and record who changed settings and when. A necessary secure session cookie supports sign-in; server-side sessions expire after two hours or on sign-out, and unfinished sign-ins expire after five minutes. We do not retain Discord OAuth access or refresh tokens. Network addresses are used for bounded abuse-rate checks. The website has no advertising or analytics cookies.
- Messages: where moderation is enabled, Hermes checks messages, edits, links and attachment metadata against the server's rules. It does not archive message bodies or attachment files. Moderation records contain the rule and action, identifiers and time. Hermes does not use Discord message content to train AI models.
- Purchases: items, subscription days, amounts, payment method, provider references, fulfillment and purchaser/recipient or vendor attribution. PayPal or the cryptocurrency processor handles payment. We do not collect payment-account passwords or complete card numbers.
- Scripts: the scripts separately provide account identifiers, device identifier hashes and keys, authentication results and usage times. These are linked to your account for device locking, access, support and delivery evidence. Successful use of the same hardware can link accounts for three calendar months; restrictions can include directly linked accounts. Shared hardware is not proof of someone's identity. Contact us to dispute an incorrect association.
Sharing and security
Cloudflare hosts the services and encrypted databases. Discord processes bot replies, roles and notifications; payment providers process checkout and confirmations. These providers may process data outside Canada under their own policies. Authorized operators use records for support, security, accounting and disputes. Restricted staff logs show purchase attribution and moderation actions; ordinary server purchase logs show only items and quantities. Discord administrators can access private channels. We may supply necessary delivery or usage evidence to a payment provider for a dispute, or disclose records when legally required.
We do not sell Discord data or use it for advertising. Access to backend records is restricted, and transport is encrypted. This policy page has no advertising, analytics or tracking cookies.
How long we keep it
Command replies normally disappear after five minutes. Temporary menu records expire after one day, abandoned proposals and completed role-action history after thirty days, and moderation history and Hermes's receipt/log copies after ninety days. Cleanup retries failures; active work or a documented retention requirement can delay removal. Processed member-scan caches are cleared. Device association observations expire three calendar months after their last accepted use.
Account identifiers, device locks, entitlements and purchase/use evidence remain while needed to provide the service and resolve transactions. These records are reviewed manually for deletion; there is no automatic full-account purge. Any legally required retention is limited to the necessary records and period. Restricted backup copies expire under the hosting provider's recovery window; deletion must be reapplied before a restored copy returns to service.
Your choices
Email us or use /get → Privacy & data where Hermes commands are available. You can request Hermes-history removal or deletion of your account data. We verify account ownership, process requests manually with automated cleanup where available, and explain any legally required records that remain. A request is not an instant erasure confirmation. Removing the account or device association may end script access; we discuss that consequence with you first. Do not send passwords, bot tokens or payment credentials.
Server managers can pause moderation and exempt channels. Individual members cannot bypass a moderated channel's rules; contact server staff about an incorrect action. Continuing to use the service creates new records. The service is not intended for people below Discord's applicable minimum age. We update this policy when practices change.