Privacy Policy

This Privacy Policy explains how Maze Tech, Inc. ("Maze", "we", "us", or "our"), the operator of Maze, collects, uses, stores, protects, and shares information when you use our website, app experiences, account features, Google sign-in, optional Gmail connection, item extraction tools, public profiles, item pages, story sharing tools, and related services.

Maze is designed to help you build a visual collection of things you own. Because Maze can connect to Gmail, we treat email data with extra care. We request read-only access and use Gmail data only to provide and improve user-facing Maze features that you choose to use.

By using Maze, you agree to this Privacy Policy and our Terms of Service. You can read our Terms at /terms.

Maze's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Maze uses Gmail API access only to scan for purchase confirmations, shipping receipts, order receipts, and related commercial emails so we can extract product details and build your Maze collection. Maze does not use Gmail data to serve advertisements. Maze does not sell Gmail data. Maze does not use Gmail data for third-party advertising, creditworthiness, insurance, lending, employment, or unrelated profiling.

Maze will not transfer Gmail data to others except as necessary to provide or improve Maze's user-facing features, comply with applicable law, address security or abuse, or as part of a merger, acquisition, or sale of assets, subject to appropriate privacy protections.

Maze will not allow humans to read your Gmail data unless we have your affirmative agreement for specific messages, doing so is necessary for security purposes such as investigating abuse, doing so is necessary to comply with applicable law, or the data has been aggregated and anonymized for internal operations.

• Read-only access: Maze cannot send emails, delete emails, edit drafts, or manage contacts.
• Purpose limitation: Gmail data is used to identify purchased items and support related Maze features.
• Advertising limitation: Gmail data is never used for ads or sold to advertisers.
• Human access limitation: human review is limited to the narrow cases described above.
• Revocation: you can disconnect Gmail from Maze in the product or revoke Maze's access from your Google account permissions at any time.

We collect information you provide directly, information generated through your use of Maze, Google identity information when you sign in with Google, information from connected Google accounts when you authorize Gmail access, and technical information collected automatically when you visit or use Maze.

• Account information, such as your email address, user ID, session information, name, username, profile image, location, and onboarding status.
• If you connect Gmail, Maze temporarily processes receipt content and metadata needed to identify purchased products. Maze stores the item information you keep, such as product names, brand names, item variants, colors, sizes, quantities, categories, product links, and product images when available. Maze does not store product prices, Gmail message IDs, email subject lines, email dates, or order dates on purchased item records.
• Collection information, such as items you keep, edit, delete, reorder, save, share, or manually add.
• Uploaded content, such as profile images and outfit or product photos you upload for item detection or visual generation.
• Usage and log information, such as browser type, device type, operating system, IP address, referring pages, pages viewed, timestamps, feature interactions, and diagnostic logs.
• Communications with us, such as emails or support requests you send to Maze.

We use information to operate Maze, authenticate users, scan Gmail for purchase-related emails, extract product details, enrich item pages with images and links, let you edit and share collections, provide public profile pages, support saved items, generate story images, respond to support requests, maintain security, debug issues, and improve the Service.

We may use non-Gmail usage information and aggregated or de-identified information to understand product performance, improve user experience, detect abuse, and develop new features. We do not use Gmail data for advertising.

Maze uses AI and automated services to extract products from email receipts, detect items in uploaded photos, search for product images and links, and generate or improve product visuals. These systems may process relevant item text, email receipt snippets, image URLs, uploaded photos, and item metadata.

AI and enrichment results can be incomplete or inaccurate. You can review, edit, remove, and reorder items in your collection. Maze does not use Gmail data, or any Google user data obtained through Google APIs, to develop, improve, or train generalized or non-personalized AI and/or ML models. Any third-party AI processors Maze uses (for example, OpenAI) are contractually restricted from using that data to train their models. Maze's use of Gmail data is limited to providing and improving Maze's user-facing features.

Maze is built around shareable collections. If you create a username, complete onboarding, keep items, or share item/profile links, parts of your profile and item collection may be publicly visible. Public information can include your display name, username, location if you provide it, profile image, item images, brands, product names, categories, product links, and generated share images.

You control which extracted items you keep during setup and can edit or delete items later. Please do not add or share anything you do not want others to see.

We do not sell your personal information or Gmail data. We share information only as needed to provide Maze, comply with law, protect rights and safety, or operate our business.

• Service providers: we use vendors for hosting, database/storage, deployment, authentication support, AI processing, image generation, product/image search, analytics, monitoring, and support. Current or expected vendors may include Convex, Vercel, Google, OpenAI, Oxylabs, FAL, and similar infrastructure providers.
• Public sharing: information you publish or share through Maze, such as public profiles and item pages, may be viewed by others.
• Legal and safety: we may disclose information if required by law, legal process, or to protect Maze, users, or others from fraud, abuse, security threats, or harm.
• Business transfers: if Maze is involved in a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction subject to appropriate protections.

We retain account information and item data for as long as your account is active or as needed to provide Maze. Gmail-derived item data that you choose to keep may remain in your Maze collection until you remove the items or request deletion. Google sign-in does not require Maze to store Gmail OAuth tokens. Gmail OAuth tokens are retained only if you choose to connect Gmail, and can be deleted by disconnecting Gmail or invalidated if you revoke access.

We may retain limited logs, backups, security records, and legal records for a reasonable period after deletion where necessary for security, fraud prevention, legal compliance, dispute resolution, or business continuity. When we no longer need identifiable information, we delete it or de-identify it.

You can manage your Maze information in several ways. Some controls are available in the product, and you can also contact us at michaela@trymaze.app.

• Disconnect Gmail from Maze in profile edit mode, or revoke Maze's access in your Google account permissions.
• Edit, remove, or reorder items in your Maze collection.
• Delete or change profile information such as name, username, location, and profile image where supported.
• Delete your account from profile edit mode, or request access to, correction of, export of, or deletion of your personal information by contacting michaela@trymaze.app.
• Clear your local browser session by signing out.

Maze may use cookies, local storage, and similar technologies to keep you signed in, remember session state, operate the Service, understand usage, diagnose issues, and improve performance. You can configure your browser to block or delete cookies, but some Maze features may not work correctly.

Maze does not use Gmail data for advertising. If we use analytics tools, those tools are used to understand product usage and performance, not to sell Gmail data or serve ads based on Gmail content.

We use administrative, technical, and organizational safeguards designed to protect personal information, including encryption in transit, access controls, token hashing where appropriate, and restricted access to production systems. No service can guarantee perfect security, and you are responsible for keeping your account and devices secure.

Maze is not intended for children under 16. If we learn that a child under 16 has provided personal information, we will take reasonable steps to delete it.

Maze may process and store information in the United States or other countries where our service providers operate. By using Maze, you understand that your information may be processed outside your country of residence.

Depending on where you live, you may have rights to know, access, correct, delete, export, or restrict certain uses of your personal information. Maze does not sell personal information as the term is commonly understood under privacy laws, and we do not sell Gmail data.

To exercise privacy rights, contact michaela@trymaze.app. We may need to verify your identity before fulfilling a request. We will not discriminate against you for exercising privacy rights.

Maze may link to retailers, marketplaces, product pages, social platforms, and other websites we do not control. Those websites have their own privacy practices. We are not responsible for their content, security, or privacy policies.

We may update this Privacy Policy from time to time. If we make material changes, we will take reasonable steps to notify you, such as posting the updated policy on this page or providing notice through the Service. Changes are effective when posted unless otherwise stated.

If you have questions, requests, or concerns about this Privacy Policy or Maze's handling of personal information, contact us at michaela@trymaze.app.