Effective Date: June 17, 2020

Previous Versions

At Looker, we believe people are at the core of everything we do. Our commitment to being an ethical and trusted steward of the data entrusted to us is core to who we are.

Frank Bien, CEO @ Looker

This Privacy Policy applies to your use of the Looker website and related services ("Services"), our Platform, and/or otherwise your communication with Looker and its Affiliate Companies. Please read it. See the Glossary for definitions and explanations of capitalized terms used in this Privacy Policy.

Privacy Shield

Looker complies with the EU-U.S., Swiss-U.S. Privacy Shield Frameworks as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of Personal Information transferred from the European Union, United Kingdom (UK) and Switzerland, as applicable, to the United States in reliance on Privacy Shield. Looker has certified to the Department of Commerce that it adheres to the Privacy Shield Principles. If there is any conflict between the terms in this Privacy Policy and the Privacy Shield Principles, the Privacy Shield Principles shall govern. To learn more about the Privacy Shield program, and to view our certification, please visit https://www.privacyshield.gov/participant?id=a2zt00000008TJGAA2&status=Active.

Privacy Shield Principles

Notice

Looker provides this Privacy Policy to describe the ways we collect, use, transfer, store, secure and protect Personal Information on our Looker.com website and services (Site) and on the Looker platform's product and integrated services (Looker Platform). It describes the ways you can exercise your rights to access and control your Personal Information, and the complaint and recourse methods available to you. Review our Cookies page for details on how we use cookies. For California Residents, also see our California Privacy Notice.

Data Integrity and Purpose Limitation

These are the ways we collect, use, and store Personal Information.

The Looker Platform

Collection and Use

The Looker Platform analyzes data in your databases on the basis of legitimate interest to fulfill our contractual commitments to you our customer. The Looker Platform acts as a Data Processor to you, our customer, as the Data Controller over your data.

The Looker Platform holds two types of Personal Information:

1. Information about Looker users.

Information about Looker users includes:

2. Customer data necessary to answer users' queries.

Once the Looker Platform is connected to a customer database, the Looker cache retains data from the customer's database that is fetched in response to its Users' queries.

Customer data is encrypted and stored by Looker for a maximum of 30 days or 2GB of data—whichever occurs first. You can also take additional steps to reduce the amount of time that query results are held in cache.

When you create an account or or your organization’s administrator, creates an account to use the Platform on your behalf, additional information about your use is created, which may collect and use the following information:

Retention and Deletion

Looker customers create and remain in control of your data and data about your users and user activities and reports. When you remove users from your Looker-connected database instance, their data will be removed from Looker's databases within 30 days and within 30 days they will no longer remain in Looker's cache.

If you are a Looker user and wish to delete a Looker user's account data, please contact your Looker Administrator or internal compliance decision-maker for assistance. At the request of our customers, we have a process to permanently anonymize the data by data engineering. Looker Administrators may either self-serve or Contact Us to request assistance.

Access

The Looker Platform uses a read-only connection for its Users to access the minimum amount of data needed to answer questions and only returns the relevant result set. Alternatively, customers can choose to give Looker write-access to their database to take advantage of PDTs (persistent derived tables). This feature lets you define summary tables that Looker will write on your behalf into your database, at a cadence of your choosing.

Additional Use and Retention

Looker has a legitimate interest to further process your Personal Information collected by the Platform as follows, depending upon the nature of your Looker deployment:

Embedded "Powered by Looker"

Powered by Looker (PBL) is a version of the Looker Platform that is extended and customized, under contract, into third party workflows or applications, either within or external to the customer's organization. This allows customers to whitelabel the Looker BI application, embed analytics into SaaS applications, and build custom applications, integrations or data visualizations.

Marketplace Developers

The Looker Marketplace is a central location within the Looker Platform for finding, deploying, and managing Looker Blocks, applications, visualizations, and plug-ins. We inform you when a tool is developed by Looker or by third-party developer. Before you download or purchase content from the Marketplace, be sure that you have evaluated the third party developer and tool. Looker shares with the developer aggregated, non-identifying and non-profiling, statistical information regarding the performance of their tool in the marketplace, such as upload and deletion counts. These third party developers are not subprocessors to Looker.

Mobile Application

In order to set up and use the device provisioning, account authentication, and deployment features of Looker’s mobile application, and improve your experience, Looker collects usage information as described above for the Looker Platform and also certain unique identifiers from the User’s device and account information. These unique identifiers include the hardware identifier for the device, operating system information, and country location based on your IP address. Additionally, we may request that you provide access to your camera to scan a QR Code.

The Looker Site

Collection

When you use the Site, use our Platform, or communicate with us (e.g. via email) you will provide, and Looker will collect certain information, some of which can be used to personally identify and/or locate you ("Personal Information").

When you use the Site, create an account to use the Site (e.g. to access training content, register for an exam, or participate in the Looker Community), engage with our services, or otherwise communicate with us (e.g. via email or chat), Personal Information will be collected and may include:

Looker also may collect information that does not identify or locate you personally, meaning company information such as SIC code, industry, number of employees, or sales funnel status. Looker reserves the right to maintain, disclose, or otherwise use such information without limitation including aggregated with other information to improve the Looker Site, Platform and services.

Use and Retention

Looker may use the Personal Information collected by the Site to provide you with services, to accomplish our business purposes and to fulfill other legal obligations, including:

This information is retained in accordance with Looker's retention policy.

Looker Community

If you participate in the Looker's Community, we process information about you in order to provide you with this service. Log into your account to access your information and manage your account: https://discourse.looker.com/

Contact community.discourse@looker.com for program related questions.

Looker's Training Program

If you participate in the Looker Learn, we process information about you in order to provide you with this service. Log into your account to access your information and manage your account: https://learn.looker.com/login

Contact training@looker.com for program related questions.

Looker's Certification Program

Looker's customers and partners may be interested in validating the skills of thier employees with this industry recognized program. Visit the Looker's Certified Program Privacy Policy and Terms.

If you participate in the Looker's Certification Program, we process information about you in order to support Looker's customers and partners and to provide you with this service. Log into your account to access your information and manage your account: https://www.webassessor.com/looker

Contact certification@looker.com for program related questions.

Looker Hosted Events

If you participate in a Looker Event, and direct us to share your information, we may share information about you with event sponsors and partners so that they may contact you about their products. Please review the event page where you registered for a listing of sponsors. Contact Us if you would like to change your sharing instructions with these sponsors. Looker also shares information about event participants with resellers and other partners that may communicate with you on our behalf.

Job Candidate Applications

Collection, Use, and Retention

If you apply for a job at Looker, we collect and use your personal information for legitimate human resources and business management reasons including:

We retain this information in accordance with our retention policy.

Access

Your personal information may be accessed by recruiters and interviewers working in the country where the position for which you are applying is based, as well as by recruiters and interviewers working in different countries.

We use third party service providers to provide a recruiting software system. We also share your personal data with other third party service providers that may assist us in recruiting talent, administering and evaluating pre-employment screening and testing, and improving our recruiting practices.

Choice, Control and Access

How to exercise your rights to access and control your Personal Information.

Email Communications Preferences

Looker respects your email communications and marketing preferences. If you prefer not to receive product release notes communications or promotional email messages (such as product updates, security alerts, marketing, events, training and certifications) from Looker, you can unsubscribe from Looker's email marketing by following the unsubscribe link located at the bottom of each promotional email, going to our Preference Center for all email communication categories, or contacting us at markops-requests@looker.com with "UNSUBSCRIBE" in the subject line. Note: Please allow five (5) business days to be removed from all email communications.

Accessing, Correcting And Deleting Your Personal Information

Ensuring that Personal Information we hold about you is accurate and complete is important to us. If you would like to request access to, correct or delete your Personal Information, please submit your request online at (https://looker.com/trust-center/privacy/requests) or Contact Us with your request. We will verify these requests and respond to you in accordance with our legal obligations, which typically means forwarding your request to the licensed administrator (in your organization) of your Looker account for review.

Accountability and Onward Transfer

This section describes our accountability with regard to the onward transfer of your Personal Information to third party service providers (subprocessors, suppliers/vendors), partners and across country borders.

Information Sharing

Except as listed below, Looker will not share Personal Information with third party service providers unless you have consented to the disclosure.

Depending on how Looker is deployed by the customer, Looker may share Personal Information with third-party service providers that need your information to provide the following operational or other support services to Looker, the Site or Platform:

To ensure the confidentiality and security of your Personal Information, we ask service providers that handle Personal Information to sign a Data Protection Addendum and undergo a security and privacy review. These service providers are restricted by contract from using Personal Information in any way other than to provide services for Looker, including on your behalf as part of your contract with us. Looker is accountable and has liability in cases of onward transfers to third party service providers.

Looker does not share the information contained in your organization's Looker database and used with the Looker Platform with the above service providers.

If you integrate a 3rd party service through the Looker Action, Integration or Application Hubs in the Marketplace, or through Professional Services contracted by you, you are choosing to share the information contained in your organization's Looker database with that 3rd party service.

Looker may also provide your Personal Information to a third party if:

Looker may also share your Personal Information with our subsidiaries, affiliates, and partners, to facilitate our global operations and in accordance with applicable laws, our Service Agreement, Terms of Service or Contracts with customers or service providers.

We may also provide your Personal Information to a third party in connection with a merger or acquisition of Looker, either in part or in whole, or the assignment or other transfer of the Site or Platform. In such event, such third party will either:

International Transfer And Storage Of Information Collected

Looker and our subprocessors and vendors primarily store information collected from you within the European Economic Area and the United States. To facilitate our global operations, we may transfer and access such personal information from around the world, including from other countries in which Looker or our subprocessors have operations. For more information about our subprocessors, visit: https://looker.com/trust-center/privacy/subprocessors

We use applicable, approved information transfer mechanisms where required, such as EU Standard Contractual Clauses (SCCs), or the EU - U.S. Privacy Shield.

Local Hosting

By default, Looker hosts instances of the Looker Platform in the U.S. region. Customers may request that we host their instance in various other regions, including within the EU, Asia and Latin America, which varies based on each unique customer circumstances. Upon request, we host in the following EU regions:

Customers can also host their own Looker instance on their own servers. Contact your Account Executive for details.

Data Security

Looker has a dedicated information security function responsible for security and data compliance across the organization.

Looker protects the Personal Information it collects via the Site or Platform with reasonable and appropriate physical, electronic, and procedural safeguards and has a SOC 2 Type II + HIPAA report and ISO27001 Certification. Any sections of the Site or Platform that collect sensitive Personal Information use industry-standard secure socket layer (TLS/SSL) encryption. The Looker platform uses AES 256 bit encryption to secure your database connection credentials and cached data stored at rest. Plus, TLS 1.2 is used to encrypt network traffic between users' browsers and the Looker platform. To take advantage of TLS, your browser must support up-to-date encryption protection, as found in the latest versions of most common browsers, such as Internet Explorer, Mozilla Firefox, Google Chrome, and Safari. The Looker data platform provides numerous product features to assist with data management, setup, and processes to help you meet data security and privacy requirements.

Recourse and Enforcement

You may contact us about our practices or to make a complaint and seek recourse according to these methods available to you, and subject to applicable enforcement powers.

In compliance with the EU-U.S. Privacy Shield Principles, Looker commits to resolve complaints about our collection or use of your personal information. European Union, UK and Swiss individuals with inquiries or complaints regarding our Privacy Shield policy should first contact Looker at the information provided below in the "Contact Us" section.

If you have an unresolved complaint, Looker has committed and signed on to the JAMS EU-U.S. Privacy Shield and Swiss-U.S. Privacy Shield ADR (JAMSADR), an alternative dispute resolution provider located in the United States. If you do not receive timely acknowledgment of your complaint from us, or if we have not resolved your complaint, please contact or visit https://www.jamsadr.com/eu-us-privacy-shield for more information or to file a complaint.

The services of JAMS EU-U.S. Privacy Shield and Swiss-U.S. Privacy Shield ADR are provided at no cost to you. Mediations will be conducted pursuant to JAMS International Mediation Rules unless the parties have specified a different set of Rules or Procedures.

Looker is subject to the investigatory and enforcement powers of the Federal Trade Commission (FTC). European Union and Swiss individuals have the possibility, under certain conditions, to invoke binding arbitration.

Do Not Track Signals

We do not track visitors to the Site across third-party websites and therefore we do not respond to Do Not Track signals in these circumstances.

Links To Third-Party Sites

The Site or Platform may contain links to a number of sites owned and operated by third parties that may offer useful information. The policies and procedures described in this Privacy Policy do not apply to those third-party sites. Please contact those third-party sites for information on their data collection, security, and distribution policies.

Minimum Age

Looker is a business service, not a consumer product. The Site or Platform is not directed to, nor intended to be used by, individuals under the age of 16, or the equivalent minimum age in the relevant jurisdiction. Looker does not knowingly collect personal information from individuals under the age of 16, or the equivalent minimum age in the relevant jurisdiction. If you become aware that an individual under the age of 16, or the equivalent minimum age in the relevant jurisdiction, has provided us with personal information, please contact us immediately at privacy@looker.com. If we become aware that an individual under the age of 16, or the equivalent minimum age in the relevant jurisdiction, has provided us with personal information, we will take steps to delete such information.

Updates to this Privacy Policy

Looker may update this Privacy Policy from time to time. When we do update it, for your convenience, we will make the updated Privacy Policy available on this page. Please check this Privacy Policy periodically for changes. If we make any material changes, we will notify you by email (sent to the email address specified in your account registered with the Site or Platform) or by means of a notice on the Site or Platform.


Contact Us

Call: +1-831-244-0340

(toll free at +1-888-315-5125)

Email: looker-data-protection@google.com or

Write: 101 Church Street, 4th Floor, Santa Cruz, CA 95060

Data Protection Officer

https://support.google.com/cloud/contact/dpo


Glossary


Previous Versions

Mar 2020

Feb 2020

Feb 2019

May 2018

July 2017

Platform Privacy Policy (July 2017)