Maze Guru

GDPR overview

There is none. The word GDPR appears nowhere on the site, in the privacy policy, in the terms or in the documentation, and neither do CCPA, DPA, data processing agreement or subprocessor. No EU representative under Article 27 is designated, no data protection officer is named, and no GDPR contact address exists. The only related commitment is a single line in the terms, where both parties agree to comply with applicable data protection laws and to negotiate any additional privacy or transfer terms in good faith should they become necessary. The privacy policy acknowledges that data is transferred outside the user's jurisdiction and says such transfers happen only where adequate controls exist, without naming any mechanism. For a European buyer this is an absence of evidence, not a claim of compliance.

Who owns the data?

Under the terms you own the assets you create, but that ownership arrives already encumbered. By using the service you grant Maze Infinity Limited a perpetual, worldwide, non-exclusive, sublicensable, royalty-free and irrevocable licence to reproduce, publicly display, perform, sublicense, distribute and prepare derivative works from both the prompts you type and the images the service returns. That licence survives termination, so closing your account does not withdraw it. The platform also runs as an open community: by default your images are publicly viewable and remixable by other members, and the licence you grant is precisely what makes that sharing possible.

Reuse rights

Yes, within limits. You own your assets and may use and redistribute them without asking permission, and the Standard tier upwards adds an explicit commercial licence and watermark-free exports. The terms place the burden of judgement on you: you are solely responsible for deciding whether using or redistributing an output is appropriate, and the vendor accepts no liability for harm caused to you or to your downstream customers. Because the system is described as trained on public datasets, outputs may unintentionally resemble protected material, and rights holders are invited to write to contact@maze.guru. Reposting other members' public creations without their permission is prohibited by the community guidelines.

Data retention & training

Hosting summary

Maze Guru publishes no hosting location. The privacy policy states only that information is processed at the company's operating offices and in any other place where the parties involved in the processing are located, and it acknowledges that data may therefore be transferred to and held on computers outside the user's own state, province or country, where data protection law may differ. The vendor undertakes not to transfer personal data to an organisation or a country without adequate controls in place, but names no country, no region, no cloud provider and no transfer mechanism, and offers no residency option. One external observation is worth recording without overstating it: the domain's A record resolves to an address geolocated in Hong Kong on Huawei Cloud. That is a network measurement taken during this review, not a vendor commitment, and it describes where the website answers rather than where user content is stored. The governing law of the terms is Singapore.