Privacy Policy

Last updated: August 2026

1. Who we are

Quixo AG, operating as NUDL ("Nudl", "we", "us"), Klosbachstrasse 103, 8032 Zürich, Switzerland, is the controller responsible for the processing described in this policy. Nudl is a Swiss financial intermediary and a member of the Self-Regulatory Organisation VQF (SRO membership no. 101241) under the Swiss Anti-Money Laundering Act (AMLA). Contact for all privacy matters: support@nudl.io.

2. Data we collect

Identification and onboarding data: name, date of birth, nationality, address, identity-document data, beneficial-ownership information, corporate documents, licensing and regulatory status, and the information you provide in our application forms.

Transaction data: payment instructions, counterparties, amounts, currencies, payment rails used, account balances held for settlement, and related records.

Communications data: correspondence with our team, including support requests and contact-form messages.

Technical data: IP address, device and browser information, and log data generated when you use our website and client portal.

3. Why we process it

We process personal data to: (a) perform our contract with you, including executing payment transactions; (b) meet legal obligations, in particular customer due diligence, sanctions and politically-exposed-person screening, transaction monitoring, and record-keeping under the AMLA and VQF regulations; (c) pursue legitimate interests such as fraud prevention, security, and service improvement; and (d) communicate with you about your account and our services.

4. Verification and screening

As a regulated financial intermediary we use specialised identity-verification and screening providers to verify documents, screen against sanctions and watchlists, and monitor transactions. These checks are a legal requirement; without them we cannot provide services. Decisions affecting your application are always reviewed by our compliance team.

5. Who we share data with

We share data only where necessary: with regulated partner financial institutions that hold client funds and execute payments; with identity-verification, screening, and IT service providers acting on our instructions; with authorities, self-regulatory bodies, and auditors where required by law; and with professional advisers under confidentiality. We do not sell personal data, and we do not use it for third-party advertising.

6. International transfers

Data is processed primarily in Switzerland and the European Economic Area. Where a transfer to another country is necessary, we rely on adequacy decisions or appropriate safeguards such as recognised standard contractual clauses.

7. How long we keep it

Records connected to our AMLA obligations, including identification documents and transaction records, are retained for ten years after the end of the business relationship or the transaction, as required by Swiss law. Other data is kept only as long as needed for the purposes above.

8. Security

We apply technical and organisational measures appropriate to the sensitivity of the data, including encryption in transit, access controls on a need-to-know basis, and logging. Client data is hosted in Switzerland or the EEA wherever feasible.

9. Cookies and analytics

Strictly necessary storage. We use minimal browser storage to keep the site and client portal working and to remember your cookie choice. This does not require consent and is not used to track you.

Analytics, only with your consent. If you accept our cookie banner, we use Google Analytics (provided by Google Ireland Limited) to understand how visitors use our website, for example which pages are viewed and how visitors arrive. This sets Google Analytics cookies and processes technical data including a pseudonymous identifier and a shortened IP address. Analytics does not run if you decline or ignore the banner, and you can withdraw consent at any time by clearing this site's storage in your browser. Google may process this data outside Switzerland and the EEA under recognised safeguards such as standard contractual clauses. We do not use analytics data for advertising and we do not sell it.

10. Your rights

Subject to the Swiss Federal Act on Data Protection (FADP) and, where applicable, the GDPR, you may request access to your data, correction, deletion (within the limits of our statutory retention duties), restriction, and a copy in a portable format, and you may object to processing based on legitimate interests. Write to support@nudl.io. You may also lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or your local supervisory authority.

11. Changes

We may update this policy from time to time. The version published on this page is the current one; material changes will be communicated to active clients.