Who we are
SELO is an agentic analytics assistant for Looker, BigQuery and Knowledge Catalog. It is an independent project designed and developed by François Fletcher in his personal capacity, and is not an official product, offering, or commitment of Google LLC or any associated employer. This policy explains what data SELO handles when you use the application and why.
Data we collect and why
- Google identity. Access is gated by Google Cloud Identity-Aware Proxy (IAP). When you sign in with Google, we receive your email address and basic profile identity. We use it solely to authenticate you, associate your conversations with your account, and enforce the access allowlist.
- Looker authorization. Looker operations run under your own Looker identity via per-user OAuth (PKCE). Tokens are used exclusively to call the Looker API as you, so every action is bounded by permissions you already hold. SELO never uses a shared, elevated service identity for your Looker actions and cannot see anything you could not already see yourself.
- Conversation content. Your messages, the assistant's responses, and artifacts created during a session (for example generated LookML or query results) are stored so you can revisit and share your own chat history.
- Feedback. If you submit feedback on a response, we store it to improve the application.
- Operational logs. Standard service logs (request metadata, errors, diagnostics) are collected through Google Cloud's logging infrastructure to keep the service reliable and secure.
Where data lives and how it is processed
- All application data is stored and processed on Google Cloud Platform. Chat history and feedback are stored in Cloud Firestore; the application runs on Cloud Run in the European Union (europe-west1).
- To generate responses, your prompts and relevant context are processed by foundation models (Google Gemini and Anthropic Claude) served through Vertex AI, inside Google Cloud. Under Google Cloud's terms, this data is not used to train those models.
- Queries you ask SELO to run execute against your own Looker instance or BigQuery project, under your own permissions.
What we do not do
- We do not sell your data or share it with third parties for advertising.
- We do not use your conversations or your query results to train machine-learning models.
- We do not access your Looker or BigQuery data outside of the actions you explicitly ask the assistant to perform.
Sharing
Conversations are private to your account unless you explicitly share a session with specific people using the in-app sharing feature. Shared sessions are visible to the accounts you name, and you can stop sharing at any time.
Retention and deletion
Chat history is retained so you can return to it, until you delete it in the app or ask us to remove it. You can request deletion of all data associated with your account by contacting us at the address below; we will action it within 30 days.
Security
Every request is authenticated by Google Cloud IAP against an explicit allowlist before it reaches the application — the underlying services accept no public traffic. Looker actions are additionally bounded by your own per-user OAuth token. Secrets are stored in Google Secret Manager.
Changes to this policy
If this policy changes materially, the effective date above will be updated and the current version will always be available at this address.
Contact
Questions or requests about your data: ffrancois@google.com.
