Your data and your account

What Sempo keeps

Four kinds of thing. Who you are: your name, your email address, and the result of your identity check — verified or not, and for which currencies and rails. What you agreed to: the date you accepted the terms, and which documents they were. Every movement of money: each deposit, each withdrawal and the status it reached, and each bank account you asked to be paid to. And the small things that make the app yours: the contacts you save, and the devices you have signed in from.

The identity documents themselves — the passport, the photograph — are not among them. They are collected by Align on its verification partner’s pages, and Sempo receives the result of the check, not the documents. See Verify your identity.

Who else sees it

Three companies, each for one job, and named in the Privacy Policy. Align opens your bank account details, moves the money and verifies who you are, and so holds your name, address, identity check and every transfer — it is a Canadian money services business registered with FINTRAC, with its own record-keeping duties. Clerk signs you in and holds your email, any password, and your sessions. Resend delivers the emails Sempo sends you. Nobody is given your data for marketing, and it is not sold. Where the law requires, it may be disclosed to a regulator or an authority — by Sempo, or by a provider under its own obligations.

How long it is kept

For as long as you have an account, and then for at least five years from your last transaction or from the day the account closed, whichever is later. That is the period the law sets for a money services business, and Sempo mirrors Align’s. The record of who you are, what you agreed to and each transaction is written once, at the moment it happens, to storage that refuses to alter or delete it before the five years are up — the refusal applies to Sempo too. A record cannot be quietly changed after the fact, which is the point of a record.

Contacts and waitlist details are not records of that kind, and are removed when you close your account or ask.

Getting a copy

Write to hello@sempo.xyz from the email address on your account and ask. You will get everything Sempo holds about you, as it is stored, in a form you can read and keep. If something in it is wrong, say so in the same message and it will be corrected — the correction sits beside the original in the record rather than replacing it. Data held by Align is Align’s to provide, under its own privacy policy; we will point you to the right place.

Closing your account

There is no button for this yet. Write to hello@sempo.xyz from the email address on your account, and say that you want the account closed — or, which comes to the same thing, that you withdraw your consent to Sempo using your data. Then, in order:

1. You hear back the same working day, saying what will be removed and what stays.
2. Within two business days, Align is told. It holds your data too, and applies its own retention to what it has.
3. Your login is deleted, which signs you out everywhere and removes your name and email address from the sign-in provider. Your contacts are deleted with it.
4. You get a note saying what was removed, what is kept, and until when.

What stays after

The record: who you were, what you agreed to, and every deposit, withdrawal and bank account, kept for the five years above and for no longer than the law requires. It is not used for anything while it waits — it exists so that a question from a bank, a regulator or you can be answered with what actually happened. Nothing else stays. The full terms are in the Privacy Policy.