Privacy Policy

1. Who We Are

GOAL API is operated by OmniServe Technologies LLC, a limited liability company organized under the laws of the State of Wyoming, United States. OmniServe Technologies LLC is the entity responsible for the personal information described in this Policy. You can reach us at the details below.

• •OmniServe Technologies LLC
• •30 N Gould St, Ste R, Sheridan, WY 82801, United States
• •Privacy enquiries: [email protected]
• •General enquiries: [email protected]

2. Scope of This Policy

This Privacy Policy describes how we collect, use, share, and protect personal information when you visit our website, create an account, or use our API. It applies to our own services only, and not to the practices of third parties whose sites or services you may reach from ours. By using the Service, you acknowledge that you have read and understood this Policy.

3. Information We Collect

We collect information you provide directly to us, information generated as you use the API, and a limited amount of technical information sent automatically by your browser or client.

• •Account information: email address, name, and, where you sign in through a third-party provider, the identifier returned by that provider
• •Authentication data: a bcrypt hash of your password; we never store your password in readable form
• •API usage data: request counts, endpoints called, timestamps, response status, and quota consumption
• •Log data: IP address, user agent, browser and operating system version, and the pages or endpoints you access
• •Payment information: billing details and subscription status, processed by Stripe; we do not receive or store your full card number
• •Support communications: the content of messages you send us

4. What We Do Not Collect

We think it is as important to state what we do not do. These are commitments, not merely current practice.

• •We do not use advertising, tracking, or third-party analytics cookies, and we run no third-party tracking scripts on our site
• •We do not sell your personal information, and we do not share it with unaffiliated third parties for their own marketing
• •We do not transmit any of your personal information to the third-party football data providers we source data from
• •We do not knowingly collect information from anyone under the age of 18

5. How We Use Your Information

We use the information we collect for the following purposes, and no others without telling you first.

• •Create and administer your account and issue your API keys
• •Process transactions, manage subscriptions, and send billing notices
• •Enforce rate limits and quotas, and detect abuse or fraudulent use
• •Send technical notices, security alerts, and support messages
• •Respond to your questions and provide customer support
• •Understand aggregate usage patterns in order to operate and improve the Service

6. Cookies and Local Storage

We do not use tracking or advertising cookies. Your session token and basic account details are held in your browser's local storage so that you remain signed in between visits; this data stays on your device and is cleared when you sign out. Any cookies we set are strictly necessary for authentication and security. Because we do not track you across sites or over time, we have nothing to disclose in response to a browser Do Not Track signal.

7. Service Providers

We share personal information only with the providers we rely on to operate the Service. Each is bound to process the information solely on our instructions, and none is authorized to use it for its own purposes. To protect our sign-in and our public demo from bots and abuse we use Cloudflare Turnstile, which may run an invisible challenge in your browser and process limited technical signals (such as your IP address and browser characteristics) for that purpose; Cloudflare's handling of this data is described in the Cloudflare Turnstile Privacy Addendum, referenced below.

• •Stripe — payment processing and subscription billing
• •Resend — transactional email, such as email verification and password resets
• •Cloudflare — content delivery, TLS termination, and protection against network attacks
• •Cloudflare Turnstile — invisible bot and abuse protection on our sign-in and demo, used in place of intrusive CAPTCHAs
• •Our cloud hosting and database provider — infrastructure on which the Service runs

See the Cloudflare Turnstile Privacy Addendum.

8. Data Retention

We retain your account information for as long as your account is active. When you delete your account, we delete your personal information within 30 days, except where a longer period is required to comply with a legal obligation, resolve a dispute, or enforce our agreements. API request logs are retained for up to 12 months for security, abuse prevention, and billing reconciliation, after which they are deleted or irreversibly aggregated. We may retain aggregated statistics that cannot identify you indefinitely.

9. Where We Store Your Information

We are established in the United States, and the personal information we hold is processed and stored there and in other locations where our service providers operate. If you access the Service from outside the United States, you understand that your information will be transferred to and processed in the United States, which may have data protection rules that differ from those of your own country. You may contact us for further detail about where a particular category of information is stored.

10. Data Security

We maintain administrative, technical, and physical safeguards designed to protect your personal information against unauthorized access, alteration, or destruction. No method of transmission over the internet or method of electronic storage is completely secure, and while we work to protect your information we cannot guarantee absolute security.

• •All traffic to and from the Service is encrypted in transit using TLS
• •Passwords are hashed with bcrypt, and API keys are stored only as irreversible hashes
• •Access to production systems is restricted and authenticated
• •Rate limiting and abuse detection protect against automated attacks

11. Your Choices and Rights

We extend the following choices to every user, wherever you are located. To exercise any of them, contact us at [email protected]. We may ask you to verify your identity before we act, and we will respond within a reasonable period and in any event as required by applicable law.

• •Access the personal information we hold about you, and obtain a copy of it
• •Correct information that is inaccurate, and complete information that is incomplete
• •Delete your personal information, or delete your account entirely, from your account settings or by contacting us
• •Export your data in a structured, commonly used, machine-readable format
• •Opt out of optional product and marketing emails at any time, without affecting service and billing notices

12. Data Breach Notification

If we become aware that the security of the Service has been compromised, or that your personal information has been disclosed to unrelated third parties as a result of external activity, we will investigate, take appropriate remedial measures, and cooperate with the relevant authorities. Where a breach is likely to result in a risk to your rights, we will notify you by email and post a notice on our website, within the timeframe required by applicable law.

13. Children's Privacy

The Service is not directed to anyone under the age of 18, and we do not knowingly collect personal information from children. If we discover that we have collected personal information from a person under 18, we will delete it promptly. If you are a parent or guardian and believe your child has provided us with personal information, please contact us so that we can take the necessary action.

14. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the date shown at the top of this page, and we will notify registered users of material changes by email or through the Service. We will not, without your consent, use your personal information in a manner materially different from what was stated at the time it was collected.

15. Governing Law

This Privacy Policy, and any dispute arising out of it, is governed by the laws of the State of Wyoming, United States, without regard to its conflict of law principles.