Privacy Policy
Last updated: 8 September 2026
How Firsaas handles personal information when you browse this website or contact us.
Who handles your information
Firsaas is operated by Firas Luthfi. For questions about personal information, contact firas.luthfi@firsaas.com.
Information and purposes
When you contact us by email or an available contact form, we receive your name, email address, service needs, and the message you choose to provide. We use this information to answer enquiries, discuss work you request, and manage an engagement if one follows. Please do not send passwords, payment card details, or other unnecessary sensitive information.
We process enquiries to take steps you request before a contract and to perform an agreed engagement. Where applicable, we also process information to meet legal obligations or protect legitimate security interests, taking your rights into account. If a separate purpose requires consent, we will request it.
Email and other providers
Our mailbox is provided by an external email service. When the website contact form is available, messages are submitted to that service; the website does not maintain a separate enquiry database. If the form is unavailable, use the email or WhatsApp links on the contact page.
Hosting and email providers process information needed to operate their services. WhatsApp and external websites process information under their own policies when you use them. Depending on the provider and service configuration, processing may occur outside Indonesia; applicable data protection requirements still apply.
How long we keep enquiries
Enquiries that do not become projects are removed from our mailbox during monthly reviews once 12 months have passed since the last communication. This means deletion takes place in the next monthly review after that period.
Project correspondence, contracts, and invoices are kept according to the engagement and applicable recordkeeping requirements. A deletion request is assessed against those requirements. Mailbox deletion does not necessarily immediately remove copies in provider backups, which follow the provider’s retention process.
Browser preferences and technical logs
This website stores your light or dark theme preference in local storage on your device. You can remove it by clearing this website’s browser data. We do not add advertising trackers or cross-site profiling to the website.
Hosting and delivery providers may process IP addresses, request details, timestamps, and security information to deliver and protect the service. Provider-managed cookies may be used for security or access controls. Log and backup retention depends on the hosting configuration and provider policies; this page does not promise a fixed deletion schedule for those records.
Your choices and requests
You may contact firas.luthfi@firsaas.com to request access, correction, or deletion of personal information, and exercise other rights available under applicable law. We may ask for information needed to verify a request. We respond within applicable legal time limits and explain any lawful reason we cannot fulfil a request.
Updates
We update this policy when our practices change. The date above identifies the latest revision. Material changes requiring notice or consent will be handled as required by applicable law.