Privacy Policy
Last updated: May 24, 2026
This Privacy Policy describes how LiveScoreJSON ("Company", "we", "us") collects, uses, and protects personal data when you use the LiveScoreJSON API service ("Service"). We are committed to protecting your privacy in accordance with applicable data protection laws, including the Turkish Personal Data Protection Law (KVKK, Law No. 6698) and the EU General Data Protection Regulation (GDPR).
1. Data Controller
LiveScoreJSON is the data controller for personal data processed through the Service. For questions or requests regarding your personal data, contact us at info@livescorejson.com.
2. Data We Collect
2.1. Account Information
When you register, we collect:
- Email address (required for authentication and communication)
- Company name and contact person name
- Password (stored as a one-way bcrypt hash — we never store plaintext passwords)
2.2. API Usage Data
When you use the API, we automatically collect:
- IP address of the requesting client
- API endpoint called, parameters, and timestamp
- Request and response sizes
- HTTP status codes
- API Key identifier (prefix only — we do not log the full key)
2.3. Billing Data
- Invoice amounts, dates, and payment status
- We do not collect or store credit card numbers, bank account numbers, or other financial account details. Payments are processed via bank transfer.
2.4. Technical Data
- Browser type and version (for portal access)
- Session information (session ID, login timestamp)
- IP addresses used for portal login
3. How We Use Your Data
| Purpose | Legal Basis |
|---|---|
| Account authentication and management | Contract performance |
| API access control and rate limiting | Contract performance |
| Usage metering and billing | Contract performance |
| Service monitoring and abuse prevention | Legitimate interest |
| Sending invoices and account notifications | Contract performance |
| Improving service reliability and performance | Legitimate interest |
| Responding to support inquiries | Legitimate interest / Consent |
4. Data Retention
- Account data: Retained as long as your account is active. After account deletion, retained for up to 12 months for legal and billing purposes.
- API usage logs: Aggregated usage data (hourly/daily) retained for 24 months. Detailed request logs retained for 90 days.
- Invoices: Retained for 10 years as required by Turkish commercial law.
- Audit logs: Retained for 24 months for security purposes.
5. Data Sharing
We do not sell, rent, or share your personal data with third parties for marketing purposes. Data may be shared with:
- Service providers: Hosting infrastructure providers (for server operation only), under data processing agreements.
- Legal authorities: When required by law, court order, or to protect our rights.
6. Data Security
We implement appropriate technical and organizational measures to protect your data:
- HTTPS/TLS encryption for all data in transit
- Bcrypt password hashing (one-way, salted)
- API Key secrets stored as cryptographic hashes
- CSRF protection on all portal forms
- Brute-force login protection (automatic lockout after 5 failed attempts)
- IP/Origin allowlist controls for API access
- Full audit logging of administrative actions
- HttpOnly, SameSite, Secure session cookies
7. Your Rights
Under KVKK and GDPR, you have the right to:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate data
- Erasure: Request deletion of your data (subject to legal retention requirements)
- Restriction: Restrict processing of your data
- Portability: Receive your data in a structured, machine-readable format
- Objection: Object to processing based on legitimate interest
To exercise these rights, contact us at info@livescorejson.com. We will respond within 30 days.
8. Cookies
The customer portal uses session cookies for authentication purposes only. These are:
- Strictly necessary: Required for portal login and CSRF protection
- Not used for tracking: We do not use analytics cookies, advertising cookies, or third-party tracking
The API itself does not use cookies.
9. International Transfers
Your data is stored on servers located in Germany (EU). If data needs to be transferred outside the EU/Turkey, appropriate safeguards (such as Standard Contractual Clauses) will be applied.
10. Children
The Service is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from children.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be notified via email at least 14 days before taking effect. The "Last updated" date at the top indicates the latest revision.
12. Contact
For privacy-related questions or data subject requests:
- Email: info@livescorejson.com
- Company: LiveScoreJSON