Legal
Last updated: 29 August 2026
This policy explains what JaipurLifes ("we," "us," the "platform") collects when you use the site, why we collect it, and what control you have over it. We've tried to write it to describe what this specific platform actually does rather than paste in generic legal boilerplate that doesn't match the product — if something here doesn't make sense or you want more detail, contact us and we'll clarify.
Account information. When you create an account, we collect your name and email address. If you sign up with a password, we store a bcrypt-hashed version of it — never the password itself in readable form, and it isn't recoverable by anyone on our side, including us. If you sign in with Google, we receive your name, email, and profile photo from Google, and we don't receive or store your Google password at any point.
Content you create. Reviews, ratings, saved places, collections, itinerary requests, and community posts or comments are all stored against your account. Reviews go through a moderation step before they're publicly visible, and every review is tied to your account so we can enforce a one-review-per-place limit and remove content that violates our guidelines.
Business information. If you claim or submit a business listing, we collect whatever business details you provide — address, phone, hours, photos, description — plus a short message explaining your connection to the business, which our team reviews before approving the claim.
Communications. If you email us or submit a support request, we keep that correspondence so we can respond to you and follow up if the same issue recurs.
Like most websites, we collect some technical information automatically: your IP address, browser type, device information, and the pages you visit. We use this in a few specific, limited ways rather than for broad tracking:
We use a session cookie to keep you signed in, managed through our authentication system (Auth.js). This cookie is essential to the site functioning — without it, you'd be signed out on every page load. We don't currently use third-party advertising cookies or cross-site tracking pixels. If that changes, this policy will be updated accordingly and, where legally required, you'll be asked for consent first.
The "Ask JaipurLifes" concierge and the itinerary generator are powered by a language model we run ourselves on our own infrastructure — not a third-party AI API. That's a deliberate choice: it means the questions you ask the concierge aren't sent to an external AI company as part of normal operation. Prompts are used to generate a response grounded in our own place and event data; they may be logged for debugging and quality purposes but are not sold or shared with advertisers.
In plain terms: to run the site (authentication, showing you your saved places, letting you write reviews), to keep it safe (rate limiting, fraud detection on business claims, moderation), to improve it (understanding what's searched for, what's broken, what's missing), and to communicate with you when necessary (claim approval/rejection notices, account-related emails, responses to support requests). We do not sell your personal data to third parties. We do not share your data with advertisers for targeted advertising.
We use a small number of third-party services to operate the platform, each with a narrow, specific purpose:
We do not share your personal data with data brokers, and we do not sell it. If we're ever legally compelled to disclose information (a valid court order or law enforcement request), we'll comply with what the law actually requires and no more.
Some content you create is, by design, public — a published review shows your display name, an approved business listing shows the details you submitted, a community post is visible to other users. If you'd rather not have your real name attached to a public review, you can set a display name that isn't your legal name on your profile.
We keep account data for as long as your account is active. If you delete your account, we remove or anonymize personal data within a reasonable period, except where we're required to retain records for legal, security, or fraud-prevention purposes (for example, audit logs of moderation actions taken against fraudulent business claims are retained for platform integrity, even after the associated account is deleted).
You can access, correct, or delete most of your own data directly through the platform — editing your profile, removing saved places, deleting a review you wrote. For anything you can't do yourself (full account deletion, a copy of your data, a specific correction request), contact us and we'll handle it directly. If you're in a jurisdiction with specific statutory data rights (such as the GDPR in the EU/UK), those rights apply to you in full, and we'll respond to a verified request within the timeframe the applicable law requires.
JaipurLifes isn't directed at children, and we don't knowingly collect personal information from anyone under 13. If we become aware that we've collected data from a child under that age without appropriate consent, we'll delete it.
Passwords are hashed with bcrypt, never stored in plain text. The site is served over HTTPS with a strict security policy (including a Content Security Policy that blocks most cross-site script injection vectors), and administrative actions are logged in an internal audit trail. No system is perfectly secure, but we treat security as a baseline requirement rather than an afterthought — see our approach in more detail if you're technically inclined by reviewing our public-facing security practices.
If we make a material change to how we handle your data, we'll update the "last updated" date at the top of this page, and for significant changes, we'll make a reasonable effort to notify active users directly rather than relying on you to check back.
Questions about this policy, or a specific request about your own data, can go to contact@kpthink.com, or through our Contact page.
