CitiXsys User Notice

CitiXsys User Notice

Version: 2.0
Effective: 14 November 2026
Applies to: everyone who uses iVendNext, iVend Cloud or iVend Retail through an account that an organisation gives them: cashiers, store managers, back-office users, handheld operators, and a partner’s consultants working in a customer’s system.
Replaces: the CitiXsys User Notice effective 1 February 2020, which stays readable at its own address.

Previous version: the version effective 1 February 2020, replaced on 14 November 2026.

You are using iVendNext, iVend Cloud or iVend Retail because an organisation, usually your employer or a customer you work for, has given you access. This notice tells you who is in charge of your account and the data in it, and what we expect of you.

1. Your organisation controls your account

1.1 The organisation that gave you access (your organisation) controls your account and everything entered into its system. It can add or remove you, decide what you may see and do, connect apps and other systems, and see, keep, change, export or delete what you enter, including the records of the sales and other work you do.

1.2 Your organisation decides how the personal data in its system is used, including yours. Questions about that, and requests to see, correct or delete your data there, go to your organisation. If you send one to us, we pass it to your organisation.

1.3 If you are a partner’s consultant working in a customer’s system, you act for that customer, and the customer controls your access there.

2. What CitiXsys does

2.1 We run the service for your organisation and process the data in its system only on its instructions, under its data processing addendum with us: the iVendNext Data Processing Addendum for iVendNext, or the CitiXsys Data Processing Addendum for iVend Cloud and iVend Retail.

2.2 Some personal data we hold for our own purposes, for example when you contact our support, sign in to our partner portal or visit our websites. Our Privacy Policy explains what we collect, why, and your rights.

3. What we expect of you

3.1 Use the service only as your organisation allows, and follow our Acceptable Use Policy.

3.2 Keep your sign-in, password and PIN to yourself. You are responsible for what is done with them. If you think someone else has used them, tell your organisation at once.

3.3 Do not enter card numbers, health records, identity numbers or other sensitive data in a place not made for it.

4. When your access ends

Your access ends when your organisation removes you or its subscription ends. What you entered stays your organisation’s, under its agreement with us.

5. Documents named in this notice

These are at https://legal.ivend.com: the Privacy Policy, the Acceptable Use Policy, the iVendNext Data Processing Addendum and the CitiXsys Data Processing Addendum.