SportAPI.ai is operated by Semalt LLC, which is the controller of your personal data ("SportAPI", "we"). This policy explains what personal data we collect when you use the website, the API, the live feed and the widgets, why we collect it, who it is shared with and what rights you have. Contact for any privacy question or request: [email protected].
1. Data we collect
| Data | When | Why |
|---|---|---|
| Email address, name, password (stored only as a hash) or Google account ID | You sign up with email or with Google | To create and secure your account and to contact you about it |
| IP address, approximate country derived from it, browser user agent and language | Sign-up and sign-in | Security, preventing duplicate free accounts and abuse, basic statistics |
| API request logs: API key, endpoint, time, status code, response time, IP address | Every API request | Counting usage against your plan limits, troubleshooting, detecting abuse |
| Plan, subscription status, Stripe customer and subscription IDs | You buy a paid plan | Giving you access to the plan you paid for. Card details are entered on Stripe's page; we never see or store them |
| Name, email, subject and message | You use the contact form | Answering your message |
| Hostname and page address of the site where a widget is embedded, request counts | A widget is shown on a website | Widget statistics and abuse prevention. We do not collect personal data about the visitors of those sites, and the widgets set no cookies |
| Pages visited, device and browser data, approximate location | You browse sportapi.ai | Website analytics through Google Analytics 4 and Statinside (see section 4) |
2. Legal bases
- Contract: account data, request logs and billing data are needed to provide the Service you signed up for.
- Legitimate interests: security, abuse prevention, fair use of the free plan and improving the Service.
- Legitimate interests and, where the law requires it, consent: website analytics.
- Legal obligation: keeping payment records as accounting and tax law requires.
3. Emails
We send service emails: messages about your account, notices when you approach or reach your request limit, and important changes to the Service or these policies. We do not sell or share your email address for others' marketing.
4. Cookies and browser storage
SportAPI itself does not use advertising cookies. After you sign in, the session token is kept in your browser's local storage, together with small settings such as the dashboard theme and the code language selected in the documentation. The website uses Google Analytics 4, which sets its own cookies (such as _ga), and the Statinside counter, which may use cookies or similar technologies, to measure visits. You can block or delete cookies in your browser settings; the website and the API still work without analytics cookies.
5. Who we share data with
We do not sell personal data. We share it only with service providers that process it for us:
- Stripe: payments and subscriptions;
- Google: sign-in with Google (if you choose it) and Google Analytics;
- Amazon Web Services (SES): sending service emails;
- Statinside: website visit statistics;
- our hosting providers, which store the servers and databases;
- RapidAPI: if you use SportAPI through RapidAPI, your account, billing and usage there are handled by RapidAPI under its own privacy policy.
We may also disclose data when required by law or to protect the Service and its users from fraud and abuse.
6. International transfers
Some of these providers process data outside the European Economic Area, including in the United States. Where that happens, the transfer is covered by safeguards such as the European Commission's Standard Contractual Clauses or the EU-US Data Privacy Framework.
7. How long we keep data
- Account data and request logs: while your account exists.
- When an account is deleted, we erase the email address, name, password hash, Google ID, IP addresses and device data, deactivate its API keys and erase its contact form messages. Request counts are kept without personal data so that usage statistics stay consistent.
- Payment records: as long as accounting and tax law requires.
- Backup copies are kept for a limited time and then overwritten.
8. Your rights
Depending on where you live, including under the GDPR, you have the right to access your personal data, correct it, have it deleted, restrict or object to its processing, receive it in a portable format, and withdraw consent at any time. To use these rights, email [email protected] from the address linked to your account; we answer within one month. You also have the right to complain to the data protection authority in your country.
9. Security
Connections to the website and the API are encrypted (HTTPS), passwords are stored only as hashes, and access to personal data is limited to the people who run the Service. No system is completely secure, so keep your password and API keys safe and tell us at once if you suspect they have been compromised.
10. Children
The Service is not intended for children under 16, and we do not knowingly collect their data.
11. Changes to this policy
We may update this policy. The date at the top shows the latest version; for material changes we will notify account holders by email or on the website.
See also the Terms of Use.