JackJack Live — Privacy Policy

Version: terms-v3 · Effective: [EFFECTIVE DATE — set this when you publish]

Joint Innovation Group LLC (“we” or “us”) operates JackJack Live. This Privacy Policy explains what information we collect through our website and related services (together, the “Service”), how we use it, who we share it with, and what choices you have. Capitalised terms not defined here have the meaning given in our Terms of Service at jackjacklive.com/terms.html.

Every statement below was checked against what the Service actually does. Where we do not collect something, we say so plainly rather than leaving room.

Consent and Age

By using the Service, you consent to the handling of your information as described here. You must be at least 18 to use the Service, and we do not knowingly collect information from anyone younger. If we learn we have, we delete it. A parent or guardian who believes we hold information about their child can write to jointinnovationgroup@gmail.com.

You may withdraw your consent at any time by deleting your account, but doing so means you can no longer use the Service.

What We Collect

Account information. To create an account we collect your email address, a display name you choose, and a password, which we store only as a salted hash — we never hold the password itself and cannot tell you what it is. You may also add a short bio, a line about your interests, an avatar, a banner, and a page background.

Photographs you upload. If you upload a photo to be turned into your seat at the table, we store that photo and the cut-out made from it. A person on our team reviews it before it appears to other players. You can replace it, and deleting your account deletes it.

Gameplay information. We record what happens when you play: hands played, pots won, chips staked and won, biggest pot, tournament results, which tables you have sat at, folds, calls, raises and all-ins, and the running totals behind the leaderboards and titles. We also keep your chip and Jacks balances, your vault items and their edition numbers, and a ledger of prizes and payouts.

Messages and social activity. Direct messages, table chat, wall posts, friend connections, blocks, and reports you file or that are filed against you.

Purchase records. Payments are processed by Stripe. We receive a record of the transaction — what was bought, when, and the amount — and we do not store card numbers, expiry dates, or security codes on our systems. Stripe handles your payment information under its own terms.

Server logs. Our server records IP addresses, timestamps, and errors, as any web server does. We store the IP address you accepted our Terms from, as a record of that acceptance, and we use IP addresses to stop the same person occupying two seats at one table.

What We Do Not Collect

This list is as much a part of the policy as the one above.

• No analytics or advertising. There is no Google Analytics, no Firebase, no advertising SDK, and no cross-site tracking of any kind anywhere in the Service.
• No cookies. Your login is held in your browser's local storage and is sent only to us. We set no tracking cookies and no third party sets any through us.
• No precise location. We do not ask for or collect GPS location. IP addresses give a rough region and nothing finer.
• No device fingerprinting. We do not collect your device model, operating system version, advertising identifier, contacts, camera roll, microphone, or any hardware identifier.
• No crash or telemetry SDK. We read our own server logs. Nothing reports from your device.

How We Use It

• To create and administer your account and sign you in
• To run the games — deal hands, seat tables, hold tournaments, maintain balances and vault items
• To show the things the game is built around: profiles, leaderboards, titles, trophies and standings
• To let you message, friend, and block other players, and to act on reports
• To enforce our Terms and Community Guidelines, including detecting collusion, chip dumping, bots and duplicate accounts
• To process purchases, prevent fraud, and keep the financial records the law requires
• To send you the email the Service depends on — confirming your address, resetting your password, and notices about your account
• To find and fix problems, and to keep the Service stable
• To comply with legal obligations and to establish, exercise, or defend legal claims

If we later want to use your information for a purpose not listed here, we will update this Policy before we do.

Who We Share It With

We do not sell your personal information, and we never have. We share it only as follows:

• Render, which hosts the Service and therefore stores its data
• Stripe, which processes payments
• Resend, which delivers our email
• Other players, but only what you make visible by playing: your display name, avatar, banner, cut-out, profile text, table chat, and your results and standings. Your email address is never shown to another player.
• Where required by law, subpoena, or other legal process, or where we believe disclosure is reasonably necessary to protect our rights, the safety of players, or the integrity of the games
• In connection with a merger, acquisition, financing, or sale of assets, in which case we will notify you and the acquirer will be bound by this Policy or one at least as protective
• With your consent, for anything else

We may also share aggregated or de-identified information that cannot reasonably identify you.

What Other Players Can See

Your profile is visible to your friends. Someone who is not your friend sees only your banner, your name, and your photos. Your profit and win rate are private unless you switch them on. Your chip count, trophies, and the titles you hold are part of the game and are visible where the game shows them.

Where It Is Stored

We are based in the United States and the Service runs on servers in the United States. If you use it from elsewhere, your information is transferred to and processed in the United States, whose data protection laws differ from those where you live. Where required, we use appropriate safeguards for these transfers, such as the European Commission's standard contractual clauses.

How Long We Keep It

• Account and gameplay information — while your account is open, and for 30 days after you delete it, so that we can reverse an accidental deletion and stop a banned player returning immediately under a new account. After that it is deleted.
• Transaction records — seven years, because tax and financial recordkeeping law requires it. These are records of payments, not of play.
• Server logs — 90 days.
• Moderation records where an account was closed for cheating — kept for as long as needed to stop the same person coming back, and no longer.

Security

Everything travels over HTTPS. Passwords are stored as salted bcrypt hashes and never in a form we could read. Sessions use signed tokens that expire. Access to the live data is limited to people who need it. No system is perfectly secure and we cannot guarantee absolute security — keep your password to yourself, and tell us at jointinnovationgroup@gmail.com if you think your account has been compromised.

Your Choices

• See and change it — most of your account and profile information can be edited in the app
• Delete it — you can delete your account yourself from your profile page. It removes your login, profile, messages, statistics and balances. You can also write to jointinnovationgroup@gmail.com and we will do it.
• Keep your numbers private — profit and win rate are off by default; there is a switch on your profile
• Keep your interests private — a separate switch on the same page
• Email — the only email we send is about your account. There is no marketing list to leave.

For Users in the EU, EEA, and UK

Joint Innovation Group LLC is the controller of your personal data. We process it on these legal bases: performance of our contract with you (running your account and the games); our legitimate interests (securing the Service, preventing fraud and cheating, improving the product); and compliance with legal obligations.

You have the right to access your personal data, to have inaccurate data corrected, to have data erased, to restrict or object to processing, to data portability, and to withdraw consent at any time without affecting processing already carried out. To exercise these rights, write to jointinnovationgroup@gmail.com. You also have the right to complain to your local supervisory authority.

For California Residents

California residents may request disclosure of the categories and specific pieces of personal information we have collected, the categories of sources, the business purposes for collecting it, and the categories of third parties we share it with. You may also request deletion or correction, and you will not be treated differently for asking. We do not sell personal information and we do not share it for cross-context behavioural advertising — there are no advertising or analytics SDKs in the Service. To make a request, write to jointinnovationgroup@gmail.com; we verify requests through your account.

Changes to This Policy

We may update this Policy. We will post the updated version here with a new effective date, and where the changes are material we will give notice through the Service. Continuing to use the Service after a change means you accept the updated Policy.

Contact

Questions or requests about this Policy or your information: jointinnovationgroup@gmail.com. Joint Innovation Group LLC, 4539 N 22nd St, Ste N, Phoenix, AZ 85016.