1. Information we collect

Depending on how you use the site, we may collect:

• Account details – name, username, email address, phone number (if provided), password (stored only in hashed form), profile and cover photo, bio and social links.
• Sign-in via Google – if you choose Google login, we receive your name, email and profile picture from Google.
• Content you create – posts, comments, reactions, reposts, direct messages, contest entries, reviews, business listings, news submissions and quiz/game scores.
• Newsletter and notifications – your email address if you subscribe, and a push-notification token if you allow browser notifications.
• Payments – premium or business-boost requests (plan, amount, payment reference you share with us). We do not store card or bank-login details on our servers.
• Technical data – IP address, browser/device type, pages viewed and approximate activity, used for security, rate-limiting and analytics.
• Messages to our AI assistant – text you type into the chatbot.

2. How we use your information

• To create and manage your account, show your profile and content, and deliver messages and notifications.
• To personalise your experience (for example recommended news, points, badges and leaderboards).
• To send OTP/verification and password-reset emails, and newsletters you subscribed to (you can unsubscribe any time).
• To review premium/boost payments and list businesses in our directory.
• To moderate content, prevent spam, abuse and fraud, and keep the site secure.
• To understand traffic and improve features, and to show advertisements to non-premium users.

3. AI features and third-party services

Some features use third-party services. Chatbot messages, and news/education text that we translate or rewrite, may be processed by Google's Gemini AI. Sign-in with Google is handled by Google. Browser push notifications are delivered through your browser vendor's push service. These providers process data under their own privacy policies. We do not sell your personal information.

4. Public information

Your name, username, profile photo, bio and public posts/comments are visible to other visitors. Direct messages are visible only to the people in that conversation and to administrators where needed for moderation or legal reasons. Please do not share sensitive personal information in public areas.

5. Advertising

We display advertisements and sponsored/popup ads that we manage ourselves. Clicks and impressions may be counted to report performance to advertisers. Premium members see an ad-free experience.

6. Data retention

We keep your data while your account is active and for as long as needed to provide the service, resolve disputes, prevent abuse and meet legal obligations. Rate-limit and security logs are kept for a short period only.

7. Your rights and choices

• Access and update your profile details from the My Profile page.
• Unsubscribe from the newsletter using the link in any newsletter email.
• Turn off push notifications from your browser settings.
• Request a copy of your data, correction, or deletion of your account and content by writing to us at rajasthanivibes@gmail.com from your registered email.
• Withdraw consent at any time, subject to legal or contractual limits.

8. Security

We use reasonable safeguards such as hashed passwords, CSRF protection, rate limiting and optional two-factor login for admins. No system is 100% secure, so please choose a strong password and keep it private.

9. Children

The site is intended for users aged 18 and over. Users under 18 may use it only with the consent and supervision of a parent or guardian. If you believe a child has given us personal data without consent, contact us and we will remove it.

10. Changes to this policy

We may update this policy from time to time. The "Last updated" date above shows the latest version; continued use of the site means you accept the changes.

11. Grievance / contact

For privacy questions, complaints or data requests, contact the Grievance Officer at rajasthanivibes@gmail.com, or use our Contact page. We aim to respond within 7 working days.

12. DPDP Act 2023 – your rights as Data Principal

We process personal data under the Digital Personal Data Protection Act, 2023, only with your consent or for lawful purposes. You have the right to: (a) get a summary of the data we hold, (b) correct or update it, (c) have it erased, (d) withdraw consent at any time (as easily as it was given), (e) nominate a person to exercise your rights in case of death or incapacity, and (f) get your grievance redressed.

• Purposes – account and login, content you post, security and fraud prevention, notifications, and (only with your consent) advertising and personalised suggestions.
• Children – the site is meant for users aged 18+. We do not knowingly track, profile or show targeted ads to children; if you are under 18, a parent or guardian must give verifiable consent.
• Retention – data is kept while your account is active and deleted within a reasonable period after you ask for erasure, unless the law requires us to retain it.
• Exercise your rights – use My Data Rights. We respond within 30 days. If unresolved you may approach the Data Protection Board of India.