add .htaccess in "data" folder with "Header set Access-Control-Allow-Origin "*"" instruction to allow cross-domain json call.