Privacy policy.

1. Information we collect

Contreol is owned and operated by DOYJO LLC. DOYJO LLC is responsible for the information practices described in this policy and is your service provider and invoice issuer. This policy covers information handled through contreol.com and its account, builder and administration features.

• Account and business details: your name, email, business name, business type, service area, optional phone number, email preferences and agreement records. Passwords and account recovery codes are stored as verification hashes.
• Website work: business descriptions, product and service details, uploaded logos, images and videos, design choices, reference links and notes, assistant conversations, website drafts and launch plans.
• Service and billing information: requested domain and mailbox names, selected services, calculated plan amounts, support correspondence and billing connection records described below.
• Technical information: session identifiers, request and security information such as IP addresses, browser requests, timestamps, usage counters and server logs used to operate and protect the service.

Website contact fields are intended to become public if included in a site you authorize for publication. A current unpublished draft is not a public website.

2. How information is used and shared

We use information to provide account access, save and edit your website, respond to your requests, generate AI drafts, prepare service and billing records, provide support, and protect the service from misuse.

Authorized operators and service providers may process information needed for those purposes. These include our hosting provider, Liquid Web, OpenAI for requested AI features, and Intuit QuickBooks for the billing connection. We may disclose information when required by law or to address fraud, security incidents or legal claims.

Customer drafts and QuickBooks records are not shared with other Contreol customers. Raw QuickBooks records, billing contact details and payment credentials are not sent to advertising services. With your optional measurement choice, a verified order can be reported to Google using only an anonymous transaction reference, service category, amount, currency and tax, as described below. Publishing a website makes the content you choose to publish available to its visitors.

3. AI writing, design and reference websites

Contreol uses OpenAI's API for its writing and design assistant. An AI request can include relevant business details, product or service text, your instructions, recent conversation context, design choices, and text from reference pages you asked Contreol to inspect. The automatic first-draft option sends the relevant business text when you request your first preview; you can turn that option off.

When you select attachments for an AI request, relevant images, supported file contents or extracted text can be sent to OpenAI with your message. Account passwords, administrator API keys and QuickBooks records are not included in designer requests. Information you type into a prompt can still be included. Do not enter payment-card details, credentials or confidential information that is unnecessary for the task.

When you ask Contreol to inspect a public reference URL, our server requests that page and saves a bounded text summary with your project context. Uploaded archives can be inspected for usable assets and reference material. When you request AI development, selected project context and supported file contents may also be used to build website functionality.

OpenAI processes requests under its own applicable terms and privacy information. Contreol's request settings do not amount to a promise that a provider retains no data.

4. QuickBooks and payment information

Only Contreol’s authorized administrator connects DOYJO LLC’s QuickBooks company. Customers do not need their own QuickBooks account or connection. The Accounting permission supports company and currency verification, customer matching or creation, invoice creation and delivery, payment reconciliation, and business accounting reports. Contreol also accepts signed Customer, Invoice and Payment change notifications.

The connection can send your name, business name, email, phone, billing address and selected services to QuickBooks. Contreol stores billing identifiers, invoice links, totals, payment references, service consents and synchronization records. Customers see their own invoices, credit balances, AI expenses and service status. Other customers’ data and internal accounting records are restricted to authorized administrators. Connection tokens and application secrets are encrypted in private server storage and are not sent to customers or the AI assistant.

Invoices for hosting, mailboxes and AI credit refills are from DOYJO LLC, sent through QuickBooks. QuickBooks accepts your payment for DOYJO LLC. Contreol verifies matching payment records before activating services, publishing a website or adding AI credits. Notifications alone do not prove payment. Monthly renewals and optional automatic refill requests create invoices; Contreol does not directly charge a card or enroll you in automatic card payments. Sandbox exercises never publish customer sites. Intuit handles payment information under its privacy statement and payment terms. Contreol does not collect card numbers, security codes or bank login credentials.

The administrator can disconnect QuickBooks and revoke access. Existing customer mappings, audit records and QuickBooks records are not automatically deleted. Disconnection does not cancel services or invoices; use your account’s cancellation controls or contact support.

Information from your website visitors

If you enable discussions, comments, attachments or custom applications, Contreol may store visitor submissions, uploaded files, access records and application data needed for those features. Public posts and attachments are visible according to your website’s settings. You are responsible for appropriate visitor notices, permissions and moderation for the website you operate. DOYJO LLC processes this information to host and operate the features you request and to protect the service. Visitors can contact the website operator or DOYJO LLC about the handling of their information.

5. Cookies, browser storage and outside links

Essential cookies support customer and administrator sessions, security checks and the QuickBooks authorization flow. The optional local-backup setting keeps draft information and selected media in browser storage on your device. Your signed-in project is also saved on the server. Disabling or clearing a local backup does not delete your server-side account or project.

You can manage cookies and stored site data through your browser. Clearing essential cookies signs you out. If you use externally hosted image or video URLs, your browser may contact those hosts, which receive technical request information. Following links to stock-media sites, reference sites, Intuit or other providers brings you under their own privacy practices.

Optional Analytics and advertising measurement

With your permission, DOYJO LLC uses Google Analytics on Contreol to understand visits, traffic sources, account creation, invoice requests, confirmed paid orders and website publication. Measurement includes a browser identifier, technical browser information and general page or event information. Google may use technical information such as your IP address to derive approximate location under its own practices. We do not send chat text, uploaded files, website drafts, names, email addresses, phone numbers, private page addresses, payment credentials or our internal costs to Analytics.

Choosing Analytics allows us to associate your browser identifier with your Contreol account privately so that a later confirmed invoice payment can be measured even if you do not return to the site. Only the anonymous identifier and limited order fields described above are sent to Google. An invoice request is not reported as a paid order. Included or promotional AI credit is not reported as a purchase.

Advertising measurement is a separate optional choice. If allowed, Google can connect ad identifiers and our conversion events to advertising performance through a linked Google Ads account. Personalized advertising and Google Signals are not enabled. A browser Global Privacy Control signal keeps advertising measurement off. This choice does not subscribe you to marketing email.

Google tracking does not load before you allow Analytics. Choose Essential only to keep it off, or reopen Cookie choices in the footer to change or withdraw your permission. Declining has no effect on your editor, account, prices or service. Your browser choice lasts up to six months. Google Analytics event data is retained for two months in this property; aggregated reports may remain longer. Our local measurement queue removes attribution payloads after delivery or expiry, while retaining anonymous event keys to prevent duplicate reporting. Ordinary billing records are retained separately as described in this policy. Withdrawal stops future measurement; contact us about previously collected data.

Google explains its processing at How Google uses information from sites that use its services. Measurement covers Contreol’s service, not automatic installation of this tag on customers’ published websites. Administrators’ testing workspaces and embedded previews are excluded.

6. Storage, security and retention

Contreol's current application server is hosted in the United States. Providers may process information in other locations under their applicable arrangements. Account records, unpublished drafts, private uploaded media and billing connection data are stored outside the public website directory with access controls. A published website contains the pages and selected media authorized for publication. Private design conversations, credentials and accounting records are excluded from published files. Connections to Contreol use HTTPS. No online service can guarantee absolute security.

Accounts and drafts are retained so you can return to your work; they do not currently expire automatically. We retain service, transaction, consent and security records as needed to provide the service, maintain records, resolve disputes and meet applicable obligations. The service does not currently offer an automatic account-deletion button or a fixed deletion interval for every record.

You can request closure or deletion using the contact below. We will review the request, verify authority where needed, and explain any records that must be retained. Removing information from Contreol does not itself remove records retained by Intuit or another provider under its separate obligations.

7. Your choices and how to contact us

Marketing follow-up is optional and is separate from creating an account or authorizing a payment. You can change the email preference in your account or contact us. Necessary account, support and billing communications are separate from marketing.

You can edit your website draft, choose whether to request AI assistance, and control the optional local backup. Manage services lets you cancel hosting or email renewals, change mailboxes, and manage AI refill invoices. Cancellation is separate from account closure or deletion; it keeps stored work and messages available for restoration under the service terms. For access, correction, deletion, account closure or other privacy requests, email brianbateman@doyjo.com or call (920) 285-7570. Identify your account and the request without sending passwords, recovery codes or card details.

Depending on where you live, applicable law may provide additional rights concerning your personal information. Contact DOYJO LLC to exercise those rights. Policy updates will appear on this page with a new effective date. Earlier privacy policy, version 2026-09-22.1.

Business email credentials and messages

If you order business email, Contreol processes the mailbox names and passwords needed for setup. Pending mailbox passwords are encrypted and removed from the setup queue after the mail server confirms the change. The mail server stores the credentials needed to authenticate your mailbox and the messages you receive and send. Passwords are not included in customer status responses or sent to the AI designer. Domain verification and routing records are retained to connect the correct website and email service to your account.