Rajasthan's AI portal privacy policy raises questions
Rajasthan's new AI portal features an AI sandbox and chatbot, but its privacy policy's vagueness on data handling and location has sparked concerns.
The Indian state of Rajasthan has launched a new artificial intelligence portal that includes an AI sandbox and a chatbot. However, the portal's privacy policy has been criticized for its lack of clarity regarding user data handling and location.
The portal, managed by the Department of Information Technology and Communication (DoIT&C), states that data is "hosted on secure servers within India in compliance with MeitY guidelines." The policy fails to specify which guidelines apply, whose servers are used, or what happens to information entered into the AI sandbox or the "Ask Raj GenAI" chatbot.
Rajasthan adopted its AI/ML Policy 2026 in January 2026, with the portal serving as a key component. The policy encourages departments to identify AI use cases. Concerns have been raised about the privacy policy's omissions, including data retention periods and potential sharing with third parties.
Furthermore, the portal's terms of service prohibit the generation of harmful content via the AI sandbox but do not identify the AI model used, its operator, or the destination of user prompts and model outputs. The "last updated" date on the privacy policy page also appears to change daily, making it difficult to ascertain when the policy was last revised.
In response to these concerns, the Rajasthan government has reportedly sent queries to DoIT&C, Google India, and the Ministry of Electronics and Information Technology (MeitY) to clarify the portal's operations and data protection practices.