Last updated: September 9, 2026

This Privacy Policy explains how Trickshot ehf. ("Trickshot", "we", "us", or "our") collects, uses, stores, and shares information when you visit https://www.trickshot.is, contact us, use our services, or use the ShotClock Calendar Sync integration.

This policy also explains how ShotClock Calendar Sync accesses, uses, stores, and shares Google user data.

1. WHO WE ARE

Trickshot ehf. is the controller responsible for the personal data described in this policy.

Trickshot ehf.

Jöfursbás 4

112 Reykjavík

Iceland

Email: trickshot@trickshot.is

Website: https://www.trickshot.is

2. INFORMATION COLLECTED THROUGH OUR WEBSITE AND SERVICES

We may collect:

- Contact and correspondence information that you provide voluntarily, such as your name, email address, telephone number, company, and the content of messages you send us.

- Project, customer, supplier, and production information required to provide our professional services.

- Technical and usage information, such as IP address, browser type, device information, pages visited, date and time of access, and diagnostic or security logs.

- Cookie and analytics information used to operate, protect, and understand use of our website. Where required by law, non-essential cookies are used only with consent.

- Internal workforce and operational information entered into ShotClock by authorized Trickshot personnel, including planning bookings and related project or scheduling information.

3. HOW WE USE WEBSITE AND SERVICE INFORMATION

We use this information to:

- Respond to enquiries and communicate with customers, suppliers, and personnel.

- Provide and administer our post-production and related services.

- Operate, maintain, secure, and improve our website and internal systems.

- Plan work, allocate staff, maintain operational records, and support business administration.

- Detect, investigate, and prevent errors, misuse, fraud, and security incidents.

- Meet contractual, accounting, employment, regulatory, and legal obligations.

Depending on the circumstances, processing is based on performance of a contract, steps taken before entering a contract, compliance with legal obligations, Trickshot's legitimate interests in operating and securing its business, consent where required, or another lawful basis available under applicable data-protection law.

4. SHOTCLOCK CALENDAR SYNC AND GOOGLE USER DATA

ShotClock Calendar Sync is an internal workforce scheduling integration operated by Trickshot. It connects selected staff calendars in Google Calendar with Planning bookings in Trickshot's private ShotClock system.

More information about the integration is available at:

https://www.trickshot.is/shotclock-calendar-sync

Google data accessed

The integration requests permission to:

- View the list of calendars to which the authorizing Google account is subscribed. This may include calendar identifiers, calendar names, and access information needed for calendar discovery and administrator mapping.

- View and edit events on calendars accessible to the authorizing Google account. The Google permission technically permits event access across those accessible calendars. ShotClock is configured to process events only in calendars that a Trickshot administrator has explicitly selected and mapped for synchronization.

For mapped calendars, the integration may access and process:

- Calendar identifiers and names.

- Google event identifiers.

- Event titles and descriptions.

- Event start and end dates and times.

- Event status, last-updated/version information, and deletion status.

- Private event properties and synchronization identifiers used to connect an event to the correct ShotClock Planning booking.

- OAuth access and refresh tokens required to maintain the authorized connection.

How Google data is used

Google user data is used only to:

- Create, update, and delete corresponding Planning bookings and Google Calendar events.

- Display scheduling information to authorized Trickshot personnel.

- Support multi-day booking synchronization.

- Preserve the connection between a Google event and a ShotClock booking.

- Prevent duplicate events and repeated changes.

- Detect conflicting edits and hold ambiguous changes for review instead of overwriting information.

- Maintain, secure, diagnose, and troubleshoot the synchronization service.

ShotClock Calendar Sync does not use Google Calendar data for time tracking, advertising, marketing, credit decisions, data brokerage, or unrelated analytics. Google Workspace API data is not used to develop, improve, or train generalized or non-personalized artificial-intelligence or machine-learning models.

Google Limited Use disclosure

ShotClock Calendar Sync's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Google API Services User Data Policy:

https://developers.google.com/terms/api-services-user-data-policy

5. STORAGE AND PROTECTION OF GOOGLE USER DATA

Synchronized Planning data and synchronization metadata are stored on Trickshot-controlled systems. Stored information may include booking data copied from mapped events, calendar and event identifiers, version identifiers, synchronization tokens, fingerprints used to identify acknowledged changes, error records, and deletion markers used to prevent deleted events from being recreated.

OAuth credentials and tokens are stored in restricted files on the ShotClock server and are accessible only to the operating system account and authorized administrators required to operate the integration. We use access controls, least-privilege configuration, transport encryption provided by Google APIs, conflict checks, protected backups, and other reasonable technical and organizational measures to protect the data.

No security measure can guarantee absolute security. We review and improve safeguards in proportion to the nature of the information and the risks involved.

6. SHARING AND TRANSFER OF INFORMATION

We do not sell Google user data or other personal data.

Google user data processed by ShotClock Calendar Sync is shared only:

- Between the selected Google calendars and Trickshot's ShotClock system as necessary to provide the synchronization requested.

- With authorized Trickshot personnel who need scheduling information or administrative access for their work.

- With infrastructure or service providers only where strictly necessary to operate, secure, or support the service and subject to appropriate confidentiality and data-protection obligations.

- Where disclosure is required by applicable law, legal process, or a valid request from a competent authority, or where necessary to protect rights, safety, and security.

Google user data is not transferred to advertising platforms, data brokers, information resellers, or third parties for targeted advertising, retargeting, interest-based advertising, creditworthiness, lending, or generalized AI or machine-learning training.

Website and ordinary business information may also be processed by providers that support website hosting, communications, IT operations, accounting, or professional services. We disclose only information reasonably necessary for those services and require appropriate safeguards where applicable.

Where information is processed outside Iceland or the European Economic Area, we use an applicable lawful transfer mechanism and appropriate safeguards as required by data-protection law.

7. RETENTION, DISCONNECTION, AND DELETION

We retain personal data only for as long as reasonably necessary for the purposes described in this policy, including contractual, operational, accounting, security, dispute-resolution, and legal requirements.

For ShotClock Calendar Sync:

- OAuth tokens are retained while the authorized Google connection is in use. The authorizing Google account owner may revoke access through Google Account permissions, and an authorized Trickshot administrator can replace or remove the saved authorization.

- Calendar mappings and active synchronization metadata are retained while a calendar is enabled and linked to ShotClock Planning.

- Event and booking information copied into ShotClock may be retained as an internal company planning or project record even after synchronization is disabled, where Trickshot has a legitimate operational or legal need to retain it.

- Limited deletion markers, event identifiers, audit details, and backup copies may be retained where needed to prevent duplicate recreation, investigate errors or security incidents, maintain record integrity, or meet legal obligations.

- Backup copies are removed through Trickshot's normal backup-retention cycle.

A staff member may request that their calendar mapping be disabled or ask for access, correction, or deletion of applicable personal data by contacting trickshot@trickshot.is. We will assess and respond to the request under applicable law. Disabling a mapping or revoking Google authorization stops future access after the change has been processed, but does not automatically erase company records that Trickshot is lawfully required or entitled to retain.

8. YOUR DATA-PROTECTION RIGHTS

Subject to applicable law and any relevant exceptions, you may have the right to:

- Request access to your personal data.

- Request correction of inaccurate or incomplete personal data.

- Request deletion of personal data.

- Request restriction of processing.

- Object to processing based on legitimate interests or to direct marketing.

- Request portability of data you provided where the legal requirements apply.

- Withdraw consent at any time where processing is based on consent, without affecting processing carried out before withdrawal.

- Lodge a complaint with the Icelandic Data Protection Authority (Persónuvernd) or another competent supervisory authority.

To exercise these rights, contact trickshot@trickshot.is. We may need to verify your identity before completing a request.

9. GOOGLE AUTHORIZATION CONTROLS

The Google account owner authorizes ShotClock Calendar Sync through Google's OAuth consent process. Access can be reviewed or revoked from the Google Account third-party connections or security settings. Staff members using a shared mapped calendar may also ask Trickshot to disable the relevant calendar mapping.

Google Account third-party connections:

https://myaccount.google.com/connections

Revocation prevents new access once it has taken effect. It does not itself delete data that was previously synchronized into ShotClock; deletion and retention of that information are handled as described in Section 7.

Google's own processing of information is governed by Google's terms and privacy policies.

10. CHILDREN'S PRIVACY

Our website, professional services, and ShotClock Calendar Sync are not directed to children. We do not knowingly collect personal data from children through ShotClock Calendar Sync.

11. CHANGES TO THIS POLICY

We may update this Privacy Policy when our services, legal obligations, or data practices change. We will publish the updated policy on this page and revise the "Last updated" date. Material changes affecting Google user data will also be reflected in relevant in-product notices where required.

12. CONTACT US

Questions, privacy requests, calendar-disconnection requests, or complaints may be sent to: