Privacy Policy

Sembis is a product of Frontbits LLC, a limited liability company registered in the Shams Free Zone, United Arab Emirates, and licensed by Sharjah Media City (Shams), with its registered address at Sharjah Media City, Sharjah, UAE. We decide how your information is used, which makes us its controller under data protection law. For anything in this policy, write to support@sembis.com.

• Your account: your email address, your name if you give it, and your password, which we store only as a bcrypt hash we can’t reverse.
• Your resumes and cover letters: everything you type into the editors, the saved versions of each resume, and your design choices.
• Files you import or check: when you upload a resume or a LinkedIn PDF, we read the text from it to fill in the form. A file you check with the free ATS resume checker, which works without an account, is read only to show you the results. Neither file is ever stored.
• Job descriptions you paste into Tailor or a cover letter.
• Usage records: how many AI credits and imports you’ve used this month, and for each AI request, which feature it was, its size and what it cost us. We use these to run your plan’s limits and to understand our costs.
• Billing: if you subscribe, your plan, its renewal date and the Stripe reference numbers for your customer record and subscription. Your card details go straight to Stripe and never reach us.
• Technical data: your IP address is used briefly to limit repeated sign in and sign up attempts, and appears in our hosting provider’s logs.
• Google sign in: if you continue with Google, Google shares your name, email address and Google account ID with us, with your permission. We never see your Google password or anything else in your Google account.
• Usage analytics: if you accept analytics cookies, Google Analytics records the pages you visit, how you found Sembis (for example, a search), your rough location, your device and browser, and when you sign up, import a resume, download a PDF or upgrade, with the amount paid. If you decline, it gets only signals without cookies or any identifier. It never receives your resumes, cover letters or email address.
• Error reports: when something breaks, a report of the error: the page or request it happened on, your browser and device type, and your account ID. Reports never include your resumes, cover letters or what you typed.

• To run your account and show you your resumes.
• To turn your resume into a PDF.
• To run the AI features you choose to use.
• To take payment and apply your plan.
• To email you about your account: confirming your address, security notices such as a password change, your plan, and, unless you turn them off in Settings, your AI credits.
• To keep the service secure and stop abuse.
• With your consent, to see which pages and features help people, so we can improve them.

We use your information because it’s needed to provide the service you signed up for, which includes keeping it secure and stopping abuse, and to meet our legal obligations. Where the law requires your consent for something, we ask for it first. For users in the EU and the UK, security and abuse prevention also rest on our legitimate interest in keeping Sembis safe.

We don’t sell your information, use it for marketing or advertising, or use it to profile you.

Only these providers, and only what each needs to do its job for us:

• Anthropic, our AI provider. When you use an AI feature or an import, the resume text, the job description or the imported file goes to Anthropic to produce the result. Nothing goes to Anthropic unless you use one of those features. Under Anthropic’s commercial terms, it isn’t used to train AI models.
• Stripe, our payment processor, if you subscribe.
• Railway, which hosts our servers and database in the United States.
• Resend, our email delivery provider, which sends the account emails described above, with your email address and the details each one needs.
• Sentry, which collects the error reports described above so we can fix problems.
• Google, which lets you sign in with your Google account, and whose Google Analytics shows us how people use the site, with its advertising features turned off.

We may also disclose information when the law requires it, or to protect the rights and safety of our users or of Sembis.

Your information is stored and processed in the United States, by Railway, Stripe, Resend, Sentry, Google and, when you use an AI feature or an import, Anthropic. If you live anywhere else, including the United Arab Emirates, the EU or the UK, it’s transferred there.

• From the United Arab Emirates: Sembis can’t run without these providers, so the transfer is necessary to provide the service you signed up for, which is a ground UAE data protection law allows.
• From the EU and the UK: transfers rely on the standard contractual clauses approved by the European Commission, with the UK addendum, in our data processing agreements with these providers, and, for providers certified under it, on the Data Privacy Framework between the EU and the US.

Everything in your account stays until you delete it. The one exception: if you sign up with an email address and never confirm it, we remind you after 23 days and remove the account and its contents after 30, since nobody has shown the address is theirs. Deleting your account, from Settings, immediately and permanently deletes your account, your resumes, your cover letters and every saved version. After that:

• AI usage records are kept for our cost accounting, with nothing linking them to you.
• Stripe keeps its payment records for as long as the law requires.
• Copies in our backups are removed as those backups expire, within 30 days.

One cookie keeps you signed in, for up to 30 days. It’s essential to the service, so there’s nothing to consent to.

If you accept, Google Analytics also sets its own cookies (named _ga and _ga_ followed by an ID), which last up to 13 months. They’re only set after you choose Accept, and you can change your choice any time from Cookie settings at the bottom of any page. We use no advertising or tracking cookies.

You can:

• see and correct your information at any time, in the app;
• delete your account and everything in it, from Settings;
• ask us for a copy of your information, or to restrict or object to how we use it.

For anything you can’t do in the app, write to support@sembis.com and we’ll reply within 30 days. If you’re unhappy with how we’ve handled your information, you can also complain to the data protection authority where you live: in the United Arab Emirates, that’s the UAE Data Office.

Connections are encrypted with HTTPS, passwords are stored as bcrypt hashes, and you stay signed in with a cookie that page scripts can’t read. Changing or resetting your password signs you out everywhere else. No system is perfectly secure, but we work to protect your information and will tell you if a breach affects it.

Sembis is for people aged 16 and over. We don’t knowingly collect information from anyone younger. If you believe we have, write to support@sembis.com and we’ll delete it.

When we change this policy, we’ll update the date at the top. If a change affects how we use your information in a significant way, we’ll tell you in the app or by email before it takes effect. Our Terms of Service cover the rest of your use of Sembis.