Privacy

Dailies is operated by Big Shot Pictures (“we”) as an internal production tool for our cast, crew, and invited collaborators. Questions about this policy go to privacy@bigshotpictures.com.

• Google account basics. Signing in with Google gives us your name, email address, and profile photo. Sign-in is limited to Big Shot Pictures workspace accounts.
• Your profile. The preferred name and role you set during onboarding.
• Calendar connections. If you connect a Google account, we store the access credentials Google issues and which account they belong to. If you add an iCal feed, we store its address and the label you give it.
• Session data. A sign-in cookie, plus the IP address and browser identifier of each session. No advertising cookies, and we sell nothing to anyone.
• Product analytics. We measure how the tool is used — which pages you open, what you click, and when you file or review work. While you are signed in, that is tied to your name and email, so we can tell one account from another; what the browser did before you signed in is joined to your account once you do. Sessions are also recorded as replays of the screens you visit, so we can see a problem the way you saw it — with the text of your calendar blocked out of the recording. This is internal product work only: never advertising, never profiling, never sold.

With your consent, Dailies gets read-only access to the primary calendar of each Google account you connect (scope: calendar.readonly). Each time your brief is assembled we fetch the current day’s events — title, start time, location — to lay out your schedule and runway.

Events are rendered and discarded: we never copy your calendar into our database, and your event titles are masked out of session replays and click analytics. The same goes for iCal feeds. We cannot edit, create, or delete anything on your calendars.

Google user data is used for one thing: showing you your own day inside your own brief. Dailies’ use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In particular, we never:

• use calendar data for advertising, or sell it to anyone;
• transfer it to third parties beyond the processors that host the product;
• let humans read it, except with your explicit consent, for security purposes, or where the law requires;
• use it to train AI or machine-learning models.

Only the services that run the product, processing data on our behalf: Vercel (hosting), PlanetScale (database), Google Cloud (file storage), PostHog (product analytics and session replay), and Sentry (error tracking). Beyond that, nothing leaves the building unless the law requires it.

We keep your data while your account is active. You stay in control:

• Disconnecting a Google account in Settings removes its stored calendar grant immediately. Removing an iCal feed deletes it immediately.
• You can also revoke Dailies’ access from your Google account permissions at any time.
• Want everything gone? Email privacy@bigshotpictures.com and we delete your account and its data within 30 days.

Data moves over TLS and lives in an access-controlled database. Calendar access is read-only by design — the brief asks for the minimum it needs to print your morning.

If this policy changes, we update this page and the date at the top. Material changes get called out in the app before they take effect.