This document (“Privacy Policy”) explains the privacy rules applicable to personal data and other information collected or submitted when you access, install, or use MazeVPN Services and Websites regardless of the device (computer, mobile phone, tablet, etc.) you use. Additional information on your personal data may also be indicated in contractual terms, supplemental privacy statements, or notices. The data controller of your personal data, as described in this Privacy Policy, is MazeVPN. ( email address: [email protected]) (“MazeVPN”, “we”, “us”, or “our”).
MazeVPN processes personal data to a limited scope to: provide Services, process payments for the Services, and enable the functioning of our Websites and mobile applications. We may process the following categories of personal data:
Information for creating your Account
• Email address. We ask for your email address as part of your registration. It is necessary for creation of your MazeVPN Account, retrieving a lost password, and using the Services.
Social networks data
• Account data. For the purpose of managing and administering our social networks (e.g., “Facebook”, “Instagram”, “Twitter”, “LinkedIn”,“YouTube”, “Reddit” accounts), we may collect and process your personal data (e.g., full name, social network profile name, pictures, and/or public comments) you provided voluntarily.
Payment related information
• Payment data. This information is necessary to collect payments for the Services. Our payment processing partners process basic billing information for payment processing and refund requests (e.g., date of purchase, payer’s IP address, postal (ZIP) code, credit card owner's full name and credit card information). We also process some of such billing information ourselves (e. g., date of purchase, credit card owner's full name, part of your credit card number, its expiration date) in cases of recurring payments or when you provide your payment details directly to us.
• Country details. When making a purchase we process information on the user’s country the purchase takes place from. This information is necessary for VAT calculation purposes.
• Information for payment fraud prevention. To prevent fraudulent payments for the Services, your personal data (such as email address) is verified by our payment processing partners fraud management tools. A payment transaction that is considered high risk may be rejected by us.
Communication data
• Email address. We use your email address to: i) send you important updates and announcements related to your use of the Services and Websites; ii) respond to your requests or inquiries; iii) send you offers, surveys, and other marketing content (you can opt-out of those at any time).
• Communication optimization data. We use various tools to help us optimize our emailing campaigns. These tools may track actions you perform with an email, such as open it or unsubscribe from further communication. We may also be able to see the user device’s operating system (e.g., Windows, Mac, iOS, Android) and country in order to optimize push and email notifications and automatically set the language.
• Live chat widget. If you contact us via live chat widget, in addition to processing your contact information, we will also process your device information (such as type of the operating system and browser) and IP address. This information is necessary for our support to determine the user's country, prevent abuse,see if the user is connected to our servers, and help our support to process queries faster.
Information collected on our Websites
• Access logs. As most websites on the internet, our Websites collect access logs (such as IP address, browser type, operating system) to operate our Services and ensure their secure, reliable, and robust performance. This information is also essential for fighting against DDoS attacks, scanning, and similar hacking attempts.
• Cookies. Cookies, pixels, and other similar technologies are usually small text or image files that are placed on your device when you visit our Websites. Some cookies are essential for our Websites to operate smoothly; We also use affiliate cookies to identify the customers referred to our Websites by our partners so that we can grant the referrers their commission
Referrals data
• Information for participating in referral programs. Participation in referral programs maintained by MazeVPN requires referrers to submit personal information (e.g., full name, e-mail address, phone number, relationship with the referred party) about themselves and a referred party so that MazeVPN could i) reach out to the referred party; ii) contact referrers with regards to their participation in referral programs and/or provision of rewards. It is the referrer's responsibility to abide by applicable privacy laws when disclosing third parties’ personal data to MazeVPN, including informing third parties that they are providing referred parties’ personal data to MazeVPN and how it will be used and processed. Referred parties may unsubscribe from any future communication at any time. If you believe that one of your contacts has provided us with your personal data and you would like it to be removed from our database, please contact us.
Your personal data is processed:
• Where it is necessary to fulfill our contract with you at your request. Such cases include: i) to provide access to our Services; ii) to process your purchase transactions; iii) to ensure the secure, reliable, and robust performance of our Services and Websites.
• Where you have provided your consent to us. Such cases may include: i) to send marketing communication (unless applicable law permits us to contact you without your prior consent); ii) to communicate with you and manage your participation in MazeVPN’s contests, offers, referrals, or promotions. Please note that although MazeVPN may also process your personal data for marketing purposes when applicable law permits us to contact you without your separate consent, if you choose not to receive marketing communication from us (i.e., if you opt-out), we will honor your request.
• We sometimes may process your personal data under the legal basis of our or third parties’ legitimate interest. Such cases include: i) to properly administer business communication with you; ii) to detect, prevent, or otherwise address fraud, abuse, security, or technical issues with our Services and Websites; iii) to protect against harm to the rights, property, and safety of MazeVPN, our users, or third parties; iv) to improve or maintain our Services and provide new products and features; v) to receive knowledge of how our Websites and applications are being used.
We do not share your personal data with third parties except as described in this Privacy Policy. Service providers. We use third-party service providers to help us with various operations, such as payment processing, email automation, Websites and app diagnostics, analytics, and other. As a result, some of these service providers may process personal data.
Some of our main long-term service providers:
• Live chat and support service platform, e.g., tawk.to
• Emailing service providers, e.g., Yandex
• Marketing, application analytics and diagnostics, e.g., Google Analytics
• Server Provider e.g., Upcloud
• Payments processing, e.g., Strip, Paypal
MazeVPN partners. Sometimes our partners, for example, distributors, resellers, and app store partners, will be independent data controllers of your personal data. In such cases, the procedures established by them (e.g., terms of service and privacy policies) will apply to such relationships. In other cases we may collaborate with partners as joint controllers meaning that we jointly define the purpose and means of data processing with them. Both joint controllers are then responsible for the data processing and its compliance with applicable privacy laws.
We also partner with third parties to display advertising on our Websites or to manage our advertising on other sites. These partners help us deliver more relevant ads and promotional messages to you, which may include behavioral, contextual, and generic advertising. We and our advertising partners may process certain personal data to help us understand your preferences so that we can deliver advertisements that are more relevant to you.
Your personal data may be processed in any country in which we engage service providers and partners. When you use our Services and Websites, you understand and acknowledge that your personal data may be transferred outside of the country where you reside.
Protection of our rights. We may disclose personal data to establish or exercise our legal rights or defend against any legal claims or other complaints. We may also share such information if we believe it is necessary in order to investigate, prevent, or take action regarding illegal activities, suspected fraud, and violations of our General Terms.
Business transfers. We may share your personal data in those cases where we sell or negotiate to sell our business or go through a corporate merger, acquisition, consolidation, asset sale, reorganization, or similar event. In these situations, MazeVPN will continue to ensure the confidentiality of your personal data.
Requests for data. As most of our servers provide by upcloud we follow the rules from that company for any data requesting. You have to read their privacy policy and Terms Of Service as well.
Please note that there are various data protection laws across different jurisdictions that provide privacy rights to you as a data subject. Subject to those applicable data protection laws, among others, you may have the following rights:
• Delete: request us to erase your personal data;
• Access: know and access personal data MazeVPN has collected about you;
• Rectify: rectify, correct, update, or complement inaccurate/incomplete personal data MazeVPN has about you;
• Object: object to the processing of your personal data which is done on the basis of our legitimate interests (e.g., for marketing purposes);
• Portability: request us to provide you with a copy of your personal data in a structured, commonly used and machine-readable format or to transmit (if technically feasible) your personal data to another controller (only where our processing is based on your consent and carried out by automated means);
• Restrict: restrict the processing of your personal data (when there is a legal basis for that);
• Withdraw consent: withdraw your consent where processing is based on a consent you have previously provided;
• Lodge a complaint: exercise your rights by contacting us directly or, if all else fails, by lodging a complaint with a supervisory authority.
Rectification. If you’d like to edit your profile information, you can update that information in your client area.
Deletion. If you wish to delete your Account or your personal data that we process. Create a support ticket to doing that.
Please note that you will need to pass through the Account verification process so that we can verify you are the owner of the Account before taking further action on your request.
MazeVPN's Obligations on Termination. Upon expiration or termination of your Account and/or Subscription, MazeVPN will immediately cease processing information that’s associated with you. However, please note that there might be cases when we retain information associated with you after expiration or termination of your Account and/or Subscription. MazeVPN also may retain information associated with you (e.g., payments data) in order to fulfill its obligations as required by applicable laws, regulations, court orders, subpoenas, or other legal processes for archival purposes.
Opt-out. If you wish to unsubscribe from our communication, you can opt out at any time by contacting us at [email protected]
We maintain tight controls over the personal data we collect. Our dedicated IT security team has implemented appropriate physical, technical, and organizational measures to protect information about you against accidental or unlawful destruction or accidental loss, alteration, unauthorized disclosure, or access and against all other unlawful forms of processing. If we detect something suspicious, we will notify you immediately and guide you through steps to stay better protected.
MazeVPN will keep your personal data only as long as necessary to provide you with the Services, or for as long as we have another legitimate ground to do so, but not longer than permitted or required by law. Some of more specific data retention terms are provided below:
• Customer billing information and payment details are kept by MazeVPN.
• MazeVPN may will use your email for marketing communication for ever after the end of your Subscription.
When we no longer have a legal ground to keep your personal data, it will either be securely disposed of, or de-identified through appropriate anonymization means.
If you have questions, requests, concerns, or complaints about this Privacy Policy or our personal data processing practices, please contact us via [email protected]
Limitation of Liability. To ensure the security of personal data, MazeVPN employs various technical, physical, and organizational security measures; however, it is your responsibility to exercise caution and reason when using the Services and Websites. You will be personally liable if your use of the Services and Websites violates any third party privacy or any other rights or any applicable laws. Under no circumstances is MazeVPN liable for the consequences of your unlawful, willful and negligent activities, and any circumstances that may not have been reasonably controlled or foreseen (please read the Terms of Service for more information).
Links to other websites. Our Websites may include links to other websites (e.g., social media websites) whose privacy practices may be different from ours. If you access any of those websites via such links and/or submit your personal data to any of those websites, your personal data is processed by the procedures established by them and governed by their privacy policies. We encourage you to carefully read the privacy policy (or other respective privacy notice) of any website you visit.
Updates to the Privacy Policy. We develop our Services and Websites introducing new features or modifying current ones constantly. Therefore, we may need to amend the Privacy Policy from time to time. If the amendments to the Privacy Policy materially affect the activities of our processing of your personal data, we will notify you in advance of such changes by reasonable means (e.g., notification through the respective applications, our Websites, or via email), and we will always indicate the date of the last update. Unless it is stated by us otherwise, each update of the Privacy Policy comes into force as of the moment when the amended Privacy Policy is published on this Website. You are expected to check this Privacy Policy regularly so that you are familiar with the most current wording of the Privacy Policy. Your continued use of the Services and Websites will be deemed acceptance thereof.
Dedicated IP service. A dedicated IP address is a unique internet protocol (“IP”) address assigned exclusively to the user. Please be aware that if you purchase a dedicated VPN service, your email will be linked to that IP address