Privacy Policy
Last updated: 28 October 2026
CannonBot is a private, single-user automation tool operated by the owner of the [email protected] Google account. It is not offered to the public and has no users other than that account's owner.
What CannonBot accesses
With the owner's explicit consent, CannonBot uses Google OAuth to access Google Drive files belonging
to [email protected], limited to the drive scope. It does not access Gmail,
Calendar, Contacts, or any other Google service.
Where data goes
No Google data is transmitted to any third party. Files are read and written only between Google Drive
and the local machine that runs CannonBot. The OAuth token is stored on that machine at
~/.hermes/google_token.json with owner-only file permissions (0600).
Retention
CannonBot retains no copy of Google data beyond files the owner deliberately places on the local machine. Tokens persist until revoked.
Revoking access
The owner may revoke access at any time at
myaccount.google.com/permissions, or by running
setup.py --revoke on the host. Revocation immediately invalidates the stored token.