Privacy Policy

Last updated: October 14, 2026

SEMA Rewards Private Limited ("we", "us", or "our") operates SEMA (the "Platform"). This Privacy Policy describes how we collect, use, and share your personal information when you use our website, mobile application, and services.

1. Information We Collect

We collect information to provide better services to all our users. The types of information we collect include:

  • Account Information: When you sign up, we collect your name, email address, profile photo, and external account identifiers (such as Google OAuth profile details).
  • Campaign and Post Data: If you use our services as a creator, we collect information about the posts you submit, including social media links, view count, and related metrics.
  • Payment Information: To process your rewards and payouts, we collect payment destination details, such as bank accounts, e-wallets, or other payment gateways you choose to link.
  • Technical and Usage Data: We automatically collect technical information such as your IP address, browser type, operating system, and pages visited on our Platform.
  • Fraud Prevention Data: When you use your account, for example to sign in, submit a post or file a claim, we record the IP address and device information you use and keep it linked to your account. We use it only to detect and investigate fraud, such as one person operating several accounts or fake views, and to review disputed claims. It is reviewed by our platform administrators and never published. It is not shared with brands, except as evidence when we have established fake views or a leak of campaign material on their campaign, as Sections 6 and 9 of our Terms of Service describe.
  • Agreement Records: When you accept our Terms of Service, or confirm a declaration with a withdrawal, we keep which version you accepted or confirmed, the text you were shown, when, and the IP address and browser used. These are evidence of what you agreed to, so we keep them while your account exists and afterwards for as long as they may be needed to establish, exercise or defend legal claims.
  • Discord Handle: If you choose to provide your Discord username, we store it so we can reach you in our community server and match your account there. This field is optional and you can clear it at any time from your profile settings.

2. How We Use Your Information

We use the information we collect for the following purposes:

  • To provide, operate, and maintain our Platform and services.
  • To verify post submissions, calculate views, and process your payouts.
  • To communicate with you, including sending updates, newsletters, and support messages.
  • To ensure compliance with our Terms of Service and protect against fraud, abuse, or unauthorized activity.
  • To analyze and improve our services, user experience, and platform security.

3. Data Protection and Security

We are committed to securing your personal data. We implement standard security measures, including HTTPS/TLS encryption and secure data hashing, to protect your information from unauthorized access, loss, or alteration.

We keep personal data only as long as it serves the purpose it was collected for. Fraud prevention records (IP address and device information) and agreement records are kept while your account exists and afterwards for as long as they may be needed to deal with fraud or to establish, exercise or defend legal claims. Account, campaign, and payout records are kept while your account is active and for as long as tax and accounting rules require after that.

4. Where Your Data Is Stored

SEMA is operated from Singapore. We store and process your data with these providers:

  • Database, file storage and sign-in: Supabase, in Singapore.
  • Application servers: Google Cloud, in Jakarta, Indonesia.
  • Website: Vercel, which delivers our pages from its global network.
  • Email: Amazon Web Services, in Singapore.
  • Payments and withdrawals: Xendit, our payment provider.

If you use SEMA from another country, your personal data is transferred to Singapore and Indonesia and processed there.

5. Sharing Your Information

We do not sell your personal data. We may share your information under the following limited circumstances:

  • With Brands and Campaigns: If you participate in a brand's campaign, your public social media posts, views, and creator handle may be visible to the campaign owner for verification.
  • Fake Views and Leaks: When we have established fake views, falsified analytics or a leak of campaign material, we may share the relevant evidence with the affected brand or agency, the social platform concerned and competent authorities, as our Terms of Service describe.
  • Service Providers: We may share data with trusted third-party services that help us run our platform, process payments, or perform technical analysis.
  • Legal Requirements: We may disclose your information if required to do so by Singapore or Indonesian law or in response to valid requests by public authorities.

6. Cookies

We use only the cookies SEMA needs to work. We do not use advertising or analytics cookies.

  • cp_refresh: keeps you signed in. Kept for 7 days.
  • sb_pkce_verifier and sb_oauth_*: complete a sign-in with Google or Discord. Kept for 10 minutes and deleted when the sign-in finishes.
  • NEXT_LOCALE: remembers your language. Kept for 1 year.
  • sema_country: the country your connection comes from, used to choose your starting language and currency. Deleted when you close your browser.
  • sema_cookie_consent: remembers your cookie choice. Kept for 6 months.

We also keep a few preferences, such as your currency, your theme and the tips you have dismissed, in your browser's own storage.

Videos from TikTok, YouTube and Instagram play in those platforms' own players when we do not hold a copy of the file. Those players set their own cookies, under TikTok's, Google's and Meta's privacy policies. In the European Union, the United Kingdom and other countries whose law asks for consent first, we load these players only after you allow it, either in the cookie banner or by pressing Play on a single video. You can change your choice at any time with Cookie settings at the bottom of our pages.

Book a Strategy Call opens Google Calendar's booking page inside our site, and Google sets its own cookies when you open it.

7. Your Rights and Data Deletion

You have the right to access, correct, or request the deletion of your personal data at any time. If you wish to delete your account or request data deletion, please contact us at:

We will process your deletion request within 30 days, subject to our legal obligations to retain certain records.

8. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at: