Privacy Policy

Last updated: November 24, 2025

1. Introduction

At Hermes, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our SMS marketing platform and services.

2. Information We Collect

We collect information that you provide directly to us, such as when you create an account, send messages, or contact our support team. This may include:

  • Contact information (name, email address, phone number)
  • Billing information (credit card details, billing address)
  • Account credentials
  • Communications and correspondence with us
  • SMS message content and recipient information

3. How We Use Your Information

We use the information we collect for various purposes, including:

  • Providing and improving our services
  • Processing payments and transactions
  • Communicating with you about our services
  • Responding to your inquiries and support requests
  • Analyzing usage patterns and trends
  • Complying with legal obligations

4. Third-Party Service Providers

We share your information with trusted third-party service providers who help us operate our platform. These providers are contractually bound to protect your data and use it only for the services they provide to us:

  • Stripe - Payment processing (processes billing information securely)
  • Twilio - SMS delivery (receives phone numbers and message content to send your campaigns)
  • Convex - Database hosting (stores your account and campaign data)
  • WorkOS - Authentication (manages secure login and access)

We do not sell your personal information to third parties for their marketing purposes.

5. Cookies and Local Storage

Our website uses minimal local storage for essential functionality only:

  • Theme Preference - We store your light/dark mode preference locally so it persists across visits
  • Banner Dismissal - We remember if you've closed promotional banners to avoid showing them repeatedly

We do not use tracking cookies, advertising cookies, or third-party analytics on our marketing website. Your browsing behavior is not tracked or sold.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide you services. We may also retain and use your information as necessary to comply with legal obligations, resolve disputes, and enforce our agreements.

7. Data Security

We implement appropriate technical and organizational measures to protect the security, confidentiality, and integrity of your data. Despite our efforts, no security system is impenetrable, and we cannot guarantee the absolute security of our systems.

8. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information:

  • Accessing or receiving a copy of your data
  • Correcting inaccurate information
  • Deleting your personal information
  • Restricting or objecting to certain processing activities
  • Data portability
  • Withdrawing consent

California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including the right to know what personal information we collect, the right to delete your data, and the right to opt-out of the sale of personal information. We do not sell your personal information.

For more details and to exercise your rights, visit our Do Not Sell My Personal Information page.

Virginia, Colorado, Connecticut, and Other States

Residents of states with comprehensive privacy laws (VCDPA, CPA, CTDPA, etc.) have similar rights to access, correct, delete, and opt-out of certain data processing. We honor these rights for all users regardless of location.

9. International Data Transfers

Your information may be transferred to, and processed in, countries other than the country in which you reside (primarily the United States). We ensure that any such transfers comply with applicable data protection laws and implement appropriate safeguards.

10. Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete that information.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be indicated by an updated "Last updated" date. We encourage you to review this Privacy Policy frequently to stay informed about how we are protecting your information.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our practices, or to exercise your privacy rights, please contact us at:

General Inquiries: info@usehermes.co
Privacy Requests: privacy@usehermes.co