Data retention schedule
How long SwizzX GmbH keeps the records and personal data connected with Qint, why, and what happens when you ask us to delete them.
Last updated:
1. Scope
This schedule applies to records that SwizzX GmbH keeps in connection with Qint: merchant contracts and accounts, payments and payouts, correspondence, logs and business verification. It supplements our privacy policy.
Within the Qint model, SwizzX does not itself carry out financial intermediation subject to the Swiss Anti-Money Laundering Act (AMLA). Anti-money-laundering due diligence is performed by our execution partner, 24crypto, which keeps its own records under the AMLA. The periods below are therefore based primarily on Swiss accounting and tax law, the need to evidence contracts, limitation periods and the data minimisation principle of the Federal Act on Data Protection (FADP), rather than on an AMLA retention period.
2. Retention periods
| Data category | Retention period | Rationale / notes |
|---|---|---|
| Merchant agreement / framework agreement | 10 years after termination of the business relationship | Contractual evidence, tax/accounting documentation and limitation-period considerations. |
| Merchant master data (company, address, UID/VAT no., contact persons) | 10 years after termination, insofar as contractually relevant | Necessary to document the contractual relationship and historic business records. |
| Merchant bank / payout account details | 10 years from the end of the financial year of the last settlement or payout linked to them | Evidence of payment flows and reconciliation. |
| Invoices, settlement statements, payout reports and fee statements | 10 years from the end of the financial year in which they were created | Swiss accounting and tax record-keeping requirements (Art. 958f of the Swiss Code of Obligations). |
| Transaction data relevant to accounting, settlement or reconciliation | 10 years from the end of the financial year in which they were created | Audit trail and documentation of business transactions. |
| Audit records of account and payment events, and records of the merchant's acceptance of the Terms & Conditions | 10 years from the event, then deleted | Audit trail and evidence of what was accepted, by whom and when; Swiss record-keeping requirements (Art. 958f of the Swiss Code of Obligations) and the anti-money-laundering duties of our execution partner (AMLA). |
| Historic versions of the Terms & Conditions | At least as long as any acceptance record that refers to the version is kept; preferably permanently version-archived | Must be possible to prove which version was accepted at a given time. |
| Buyer order / receipt / confirmation e-mails | 10 years if they document a transaction or accounting-relevant event | Transaction/accounting evidence; an underlying structured record may suffice if complete and immutable. |
| General support or marketing e-mails | Only as long as necessary; typically 1–3 years | No general 10-year retention duty; data minimisation under Swiss data protection law. |
| Formal shareholder / corporate meeting minutes | At least 10 years | Corporate-law documentation and evidence of formal resolutions. |
| Ordinary internal meeting notes | As long as operationally necessary; 10 years for material decisions | No blanket statutory period; important business decisions are retained as evidence. |
| Video / audio recordings of online meetings | Typically 30–90 days, then deleted unless specifically needed | Data minimisation; a written summary or decision record is retained instead where appropriate. |
| Login / security / access logs | Typically 12 months | Security, troubleshooting and traceability; longer only where justified. |
| Logs subject to Art. 4 of the Swiss Data Protection Ordinance (DPO), where applicable | At least 1 year | Specific statutory minimum for qualifying logging obligations. |
| Passport / ID copies of merchant representatives | Not automatically 10 years | Without a Swiss AML/AMLA retention duty, prolonged storage requires a separate purpose and proportionality assessment. |
| Verification result / representation check | 10 years after termination of the business relationship, where retained as contractual evidence | The result, date, method/provider and authority to represent are kept rather than unnecessary raw identity data. |
| Raw verification data: selfie, video, biometric material, temporary uploads | Deleted after verification plus a short complaint/security period; e.g. 90 days to max. 12 months unless justified | Data minimisation and purpose limitation; no AML/AMLA retention period is assumed for SwizzX under the Qint model. |
| Identification and anti-money-laundering records held by the execution partner (24crypto) | Kept by 24crypto for at least 10 years after the end of the business relationship or the completion of the transaction (Art. 7(3) AMLA) | 24crypto is a financial intermediary subject to the Anti-Money Laundering Act and responsible for these records itself. This schedule does not shorten its periods. |
3. Legal hold
A legal hold overrides the periods above. If a dispute, chargeback, fraud case, regulatory inquiry, claim or litigation is pending or reasonably foreseeable, the affected records are preserved until the matter is finally resolved.
4. Deletion requests
You can ask us to delete your data at any time by writing to info@qint.ch. We accept the request and confirm it to you in writing.
Where data is subject to a statutory retention period, it is deleted when that period ends. Our written confirmation tells you the exact date on which your data will be deleted. Until then, the data is kept only to meet the retention obligation and is not used for any other purpose.
5. Changes to this schedule
This schedule is aligned with our privacy policy and merchant contracts. We update it when the legal structure of Qint or the applicable law changes; the date at the top shows the current version.
6. Contact
SwizzX GmbH
Baarerstrasse 107
6300 Zug, Switzerland
info@qint.ch