What we keep, and why

Two halves, and only one is public

This site is a portfolio with an enquiry form on it. Behind a passphrase there is also a private dashboard that only Citra and her assistant sign in to — the schedule, invoices, expenses and a to‑do list. Visitors never reach the dashboard and the dashboard holds nothing about visitors except the enquiries they send.

What the enquiry form collects

When you fill in Book, these fields are sent and stored:

• Your name
• Your phone or WhatsApp number
• The date and time of the job
• The service you chose, and any add‑ons
• Anything you type in the notes field
• The indicative estimate the page calculated

That is the whole list. It is used for one thing: to quote the job and arrange it with you. Citra is notified on WhatsApp so an enquiry is not sitting unread. If the form cannot reach the server it opens WhatsApp instead, and then the message goes nowhere until you press send.

If the booking goes ahead, the same details plus the invoice and the record of payment are kept for as long as Indonesian bookkeeping requires. If it does not go ahead, ask and the enquiry is deleted.

What this site does not do

• No analytics. No Google Analytics, no Meta pixel, no heatmaps, no session recording. Nothing counts your visit.
• No advertising or tracking cookies. None at all.
• No profiling, no sale, no sharing for marketing. Your number is not a mailing list and is never passed to anyone who wants to sell you something.

One cookie exists on the whole site: a signed session cookie set when Citra signs in to the dashboard. It is strictly necessary, it identifies no visitor, and if you have never signed in you have never been given it.

Photographs

The work on this site was photographed at jobs and on shoots. If you appear in one of them and would rather not, write to ask@touchupmafia.com and it comes down — no reason needed, no argument.

A photograph you send privately, over WhatsApp or by email, is used to do the job you sent it for and is not published without your word.

Google user data

The dashboard connects to Citra's own Google account so that a confirmed booking becomes a real calendar entry and her to‑do list is the same list whether she opens this dashboard or the Google Tasks app on her phone.

What it asks for, and what it does with it

Calendar

Creates, updates and cancels events for her own bookings. It reads an event only to find the one it wrote before, so the same booking never lands twice.

Tasks

Reads and writes her task list, both ways, so a task ticked on her phone is ticked in the dashboard and the other way round.

Those two are the only scopes that touch personal data, and the only account they are ever used with is Citra's. There is no sign‑in with Google for visitors, so no visitor's Google account is ever connected.

Where the credential lives

The Google credential is held on a single private server and never reaches this website's code or a browser. The website asks that server to write a calendar event; the server holds the token and does the writing.

What never happens to it

• It is never sold, rented or transferred for advertising.
• It is never used to train, fine‑tune or improve any AI or machine‑learning model, ours or anyone else's.
• It is never read by a human except Citra and her assistant, and then only to run the business — not for support, not for analysis.
• Calendar and task content is never sent to an AI model provider.

touchup mafia's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Taking it away

Access can be withdrawn at any time at myaccount.google.com/permissions. Nothing is kept on our side afterwards: the dashboard stores only a calendar event id and a task id so it can find its own rows again, and those are deleted on request.

Who else handles it

Only where the work actually requires it:

Cloudflare

Hosts this site and the database the enquiries sit in.

Google

Calendar and Tasks, on Citra's own account, as above.

WhatsApp

How Citra is told an enquiry arrived, and how she replies to you.

Instagram

Only posts Citra publishes herself. It is given nothing about you.

AI providers

Text from her own business mail and bank statements is sent to a model to pull out a date or sort an expense. Your enquiry is not sent anywhere to be analysed, and no Google calendar or task content is either.

Cloudflare is a global network and the private server is rented abroad, so your details may be stored or processed outside Indonesia.

What you can ask for

Write to ask@touchupmafia.com and ask for a copy of what is held about you, a correction, or deletion. One person answers that mailbox, so allow a few days. Deletion is honoured unless an invoice has to be kept for tax, and in that case you will be told which record stays and why.

Children

This site is not aimed at children and the enquiry form is meant to be filled in by an adult. Makeup is sometimes done for someone under 18 — at a wedding, at a graduation — and in that case the booking is made by a parent or guardian, and nothing is collected from the child directly.

Changes

If this changes, the date at the top changes with it. A change that affects what is collected or who sees it will be said plainly here rather than folded quietly into a paragraph.