Who we are and what this covers
JPWilliamson Ventures LLC, in Austin, Texas, is responsible for the personal information described in this policy. This policy covers our company website and services that link to it. TheMegaMine privacy notice adds product-specific detail.
The corporate website does not use advertising pixels, analytics tags, third-party font calls, or contact forms. It does not set cookies at launch. Following a link to another service may subject you to that service’s separate data practices.
Information we process
- Account and identity: email, display name, authentication identifiers, region, derived age bracket, and linked Minecraft identity.
- Product activity: settings, worlds, social relationships, messages, events, progression, inventory, and competitive records.
- Transactions: product, amount, currency, payment-provider identifiers, entitlement, refund, and fraud signals. We do not receive full card numbers from Stripe, Apple, or Google.
- Device and operations: app version, platform, locale, push token, IP address, request metadata, security events, diagnostics, and operational logs.
- Support and safety: messages to us, reports, moderation records, appeals, and information needed to resolve a request.
- AI-enabled features: prompts, selected account or product context, generated responses, and safety metadata when you choose a feature clearly identified as AI-enabled.
At registration we may collect birthdate and country or region long enough to derive the applicable age bracket and regional rules. We retain the bracket and region rather than the raw birthdate after derivation, except where law or a documented consent process requires otherwise.
Why we process it
We process information to:
- create, secure, recover, and operate accounts;
- provide connected play, social, world, event, collection, progression, and companion features;
- process purchases, deliver entitlements, reconcile providers, prevent duplicate grants, and handle refunds;
- apply age, family, privacy, safety, moderation, and spending controls;
- provide support and communicate about service, security, or policy changes;
- detect abuse, fraud, attacks, outages, and violations; and
- comply with accounting, tax, legal, and regulatory obligations.
Where applicable, our legal bases are performance of a contract, legitimate interests in safe and reliable operations, consent for optional processing, and compliance with law.
Processors and disclosures
We disclose information only as needed for the purposes above, including to:
- Amazon Web Services: hosting, identity, storage, databases, logs, email infrastructure, and optional AI inference through Amazon Bedrock when enabled.
- Microsoft and Minecraft services: identity linking and connected Minecraft functionality you request.
- Expo: native app build, update, and push-notification infrastructure.
- Stripe, Apple, and Google: payment, store, subscription, refund, fraud, and entitlement administration.
- JPWilliamson Ventures-operated infrastructure: game, social, AI, database, observability, and operational systems running on company-controlled equipment.
We may also disclose information to professional advisers, authorities, or another business when reasonably necessary for legal compliance, safety, claims, financing, or a corporate transaction. We do not sell personal information or share it for cross-context behavioral ads.
Retention schedule
- Account, profile, social, world, progression, and settings data: while the account is active, then deleted or anonymized through the deletion process.
- Raw birthdate used for classification: only for the derivation transaction, then discarded; the derived age bracket and region remain with the account.
- Operational application logs: normally 30 days.
- Support records: up to 24 months after closure, unless needed for an active claim or safety matter.
- Moderation, fraud, and security records: as long as an active restriction or investigation requires, then normally up to three years after closure.
- Transaction, tax, and accounting records: up to seven years, or longer where law requires.
- System backups: protected on a rolling schedule and normally overwritten within 35 days after primary deletion.
Retained records are limited, access-controlled, and pseudonymized where practical.
Security and international processing
We use access controls, encryption in transit, provider verification, logging, backups, least- privilege permissions, and incident-response procedures appropriate to the information. No system is perfectly secure, so promptly report suspected compromise.
We are based in the United States and use providers and infrastructure that may process data in the United States and other countries. Where required, we use contractual and organizational safeguards for cross-border transfers.
Your choices and rights
Depending on where you live, you may have rights to access, correct, delete, receive, restrict, or object to processing of your information, withdraw consent, or appeal a denied request. You can manage available settings in the product or email us. We verify requests and may retain the limited records described above when legally permitted or required.
You may request MegaMine deletion through the authenticated flow described at/apps/megamine/delete-account. We aim to complete ordinary deletion within 30 days.
Children and teens
Our account-based consumer services are not directed to children under 13. We block registration under 16 in the EEA, United Kingdom, and other jurisdictions requiring that threshold unless an appropriate verified parental-consent process is available. Teen accounts receive age-aware privacy, contact, safety, and commerce controls.
Changes and complaints
We will update the date above when this notice changes and provide additional notice for material changes where required. You may contact us first with a concern. You may also complain to the privacy or data-protection authority where you live.
Questions
Contact contact@jpwilliamson.org. Include the account email and enough transaction or account detail for us to locate the request, but do not send passwords, full card numbers, or store credentials.