Dcm apps privacy policy

Privacy Policy — Decimus Capital Markets Applications

Effective date: January 1, 2026

This Privacy Policy covers the software applications, automations, scripts and integrations built or operated by Decimus Capital Markets, LLC ("DCM", "we", "us"). Examples include HERMES and its related tools, such as HERMES Bridge. Together these are the "Apps."

The Apps are private tools for DCM's own use and for the use of people DCM expressly authorizes. They are not offered to the general public.

1. Information the Apps may access

An App accesses information only after an authorized user grants it permission, for example through Google's OAuth consent screen. Depending on the App and the permissions granted, this may include:

  • Account information: the name and email address of the signed-in user.

  • Google Workspace data: files and folders in Google Drive; messages and labels in Gmail; events in Google Calendar; content in Google Docs, Sheets and Slides.

  • App configuration and logs: settings, task records, request and result files, and operational logs the Apps create.

  • Content the user provides: instructions, documents and other material a user submits to an App.

Each App requests only the permissions it needs for its own functions. The exact permissions are shown on the consent screen before access is granted.

2. How we use information

We use information accessed by the Apps only to:

  • carry out the tasks the authorized user requests, such as organizing files, managing email, maintaining records and producing reports;

  • operate, secure, maintain and troubleshoot the Apps;

  • comply with legal obligations.

We do not use this information for advertising. We do not sell it. We do not use it to build profiles for any unrelated purpose.

3. How we share information

We do not sell, rent or trade user data. We share information only:

  • With service providers acting on our behalf: for example, cloud hosting and AI-assistant services. They receive only what is needed to perform a task the user requested, and they are bound by their own terms and confidentiality obligations.

  • At the user's direction: for example, sending a message or document the user has asked an App to send.

  • When required by law: or to protect the rights, safety or security of DCM, our users or others.

4. Google user data

The Apps' use of information received from Google APIs, and any transfer of it to another app, will adhere to the Google API Services User Data Policy, including its Limited Use requirements. In particular:

  • Google user data is used only to provide or improve user-facing features of the App the user authorized.

  • Google user data is not transferred to others except as needed to provide those features, to comply with law, or as part of a merger, acquisition or sale of assets with notice to users.

  • Google user data is not used for advertising.

  • Google user data is not used to develop, improve or train generalized artificial-intelligence or machine-learning models.

  • Humans do not read Google user data unless the user consents, it is necessary for security or legal compliance, or the data has been aggregated and anonymized for internal operations.

5. Storage, retention and deletion

Most information the Apps process stays in the authorized user's own accounts, such as Google Drive and Gmail. Working files and logs are kept only as long as needed for their purpose, then archived or deleted.

A user can revoke an App's access to their Google account at any time at https://myaccount.google.com/permissions. A user can also ask us to delete data we hold about them by contacting us at the address below.

6. Security

We use reasonable safeguards to protect information, including:

  • OAuth-based access controls;

  • limiting Apps to the permissions and files they need;

  • backups;

  • verification of changes.

No system is completely secure, and we cannot guarantee absolute security.

7. Children

The Apps are not directed to children, and we do not knowingly collect information from anyone under 13.

8. Changes to this policy

We may update this policy from time to time. The effective date above will change when we do. Continued use of an App after an update means the user accepts the revised policy.

9. Contact

Decimus Capital Markets, LLC Email: haimbodek@gmail.com