Privacy policy.

1. Information we collect

Contreol is owned and operated by DOYJO LLC. DOYJO LLC is responsible for the information practices described in this policy and is your service provider and invoice issuer. This policy covers information handled through contreol.com and its account, builder and administration features.

• Account and business details: your name, email, business name, business type, service area, optional phone number, email preferences and agreement records. Passwords and account recovery codes are stored as verification hashes.
• Website work: business descriptions, product and service details, uploaded logos, images and videos, design choices, reference links and notes, assistant conversations, website drafts and launch plans.
• Service and billing information: requested domain and mailbox names, selected services, calculated plan amounts, support correspondence and billing connection records described below.
• Technical information: session identifiers, request and security information such as IP addresses, browser requests, timestamps, usage counters and server logs used to operate and protect the service.

Website contact fields and other content become accessible to visitors when you authorize publication, including publication of a free preview. A draft saved only inside your account is not public merely because it is saved. A published preview is accessible to anyone who has or discovers its address. Search-engine no-index instructions do not make it private or prevent copying. Hiding a preview or removing published content does not remove copies others have already obtained.

Optional Google sign-in and setup guidance

If you choose Google sign-in, Google provides a verified account identifier, email address and profile name. Contreol verifies the identity response, stores the account identifier to recognize you on later visits, and uses your name and email to help complete your profile. The short-lived identity response is not retained. Google sign-in does not give Contreol access to your Gmail, Analytics, Search Console or Ads data, and does not authorize billing. Existing password accounts require authentication before linking Google.

The Google sign-in component may load on account pages when that option is enabled. It is used for authentication, separately from optional audience and advertising measurement. Google handles its sign-in service under its own privacy policy. Contreol does not receive your Google password.

Your traffic setup checklist stores the steps you mark complete with your Contreol account. Assistant guidance uses the business context and information you choose to share. Checklist completion is your report of progress; it does not demonstrate that Google has received tracking data or authorize account access.

2. How information is used and shared

We use information to provide account access, save and edit your website, respond to your requests, generate AI drafts, prepare service and billing records, provide support, and protect the service from misuse.

We do not sell personal information for money or gather information for resale. We process the account, website, service and technical information described in this policy to operate Contreol, and use optional Analytics and advertising measurement only with the choices described below. Service records, saved work and optional measurement still involve collecting and processing information.

Authorized operators and service providers may process information needed to deliver and protect the service. These include our hosting provider, Liquid Web, OpenAI for requested AI features, and Intuit for invoice delivery and payment processing. The Google sign-in, optional measurement and support providers are described in the relevant sections of this policy. These disclosures are distinct from selling information for money; privacy laws may define sale or sharing more broadly, and the applicable choices and rights described here still apply.

We do not voluntarily disclose nonpublic customer information to government agencies. We disclose such information only when legally required, including under a valid court order, warrant, legally binding subpoena or other mandatory legal obligation. We review the legal basis and scope of a demand and limit disclosure to what is required. Where legally permitted, we will notify the affected customer before disclosure. The providers you use through Contreol may have their own legal obligations and information practices. Limited information may also be processed by our authorized advisers or service providers as necessary to handle fraud, security incidents or legal claims, subject to applicable law; this does not create a separate permission for voluntary government disclosure.

Customer drafts and billing records are not shared with other Contreol customers. Raw billing records, billing contact details and payment credentials are not sent to advertising services. With your optional measurement choice, a verified order can be reported to Google using only a pseudonymous transaction reference, service category, amount, currency and tax, as described below. Publishing a website makes the content you choose to publish available to its visitors.

3. AI writing, design and reference websites

Contreol uses OpenAI's API for its writing and design assistant. An AI request can include relevant business details, product or service text, your instructions, recent conversation context, design choices, and text from reference pages you asked Contreol to inspect. The automatic first-draft option sends the relevant business text when you request your first preview; you can turn that option off.

When you select attachments for an AI request, relevant images, supported file contents or extracted text can be sent to OpenAI with your message. Account passwords, administrator API keys and billing records are not included in designer requests. Information you type into a prompt can still be included. Do not enter payment-card details, credentials or confidential information that is unnecessary for the task.

When you ask Contreol to inspect a public reference URL, our server requests that page and saves a bounded text summary with your project context. Uploaded archives can be inspected for usable assets and reference material. When you request AI development, selected project context and supported file contents may also be used to build website functionality.

OpenAI processes requests under its own applicable terms and privacy information. Contreol's request settings do not amount to a promise that a provider retains no data.

Saved work and interruption recovery

To support interruption recovery, Contreol stores submitted requests, related project revision and task information, task status, completed steps and received provider responses. These records can contain the business text, prompts, attachments or extracted content used for the request. They are used to recover available work, reduce duplicate processing, reconcile credit use and investigate problems. Saved request and provider-response records are encrypted in private server storage; other task and project records use access-controlled private storage. Authorized operators may access records as needed to operate or support the service. These records are not intended to be published as part of your website.

Recovery records do not currently have a uniform automatic deletion period. A dismissed recovery item is not necessarily erased from stored records. Requests for access or deletion are handled through the contact process below, subject to records that must be retained for service, security, billing, dispute or legal purposes. Provider retention is separate from Contreol’s retention.

4. Invoices and payment information

DOYJO LLC sends your invoice through QuickBooks. No QuickBooks account is required. Approve your order by paying the invoice with a credit card or ACH. Only Contreol’s authorized administrator connects DOYJO LLC’s billing account. The Accounting permission supports company and currency verification, customer matching or creation, invoice creation and delivery, payment reconciliation, and business accounting reports. Contreol also accepts signed Customer, Invoice and Payment change notifications.

The connection can send your name, business name, email, phone, billing address and selected services to our invoice and payment provider, Intuit. Contreol stores billing identifiers, invoice links, totals, payment references, service consents and synchronization records. Customers see their own invoices, credit balances, AI expenses and service status. Other customers’ data and internal accounting records are restricted to authorized administrators. Connection tokens and application secrets are encrypted in private server storage and are not sent to customers or the AI assistant.

Hosting and mailbox recurring payment requests and one-time AI credit refill invoices are from DOYJO LLC. Our payment provider accepts credit card or ACH payments for DOYJO LLC. Contreol verifies matching payment records before activating services, publishing a website or adding AI credits. Notifications alone do not prove payment. Hosting and email use monthly recurring payments. Hosting and mailboxes selected together share one agreement; later mailbox additions can have separate agreements. Our payment provider sends the requests and handles approved recurring card or ACH payments. Contreol stores agreement references, reviewed consent, service allocations and matching invoice/payment evidence to start, continue or pause access. A low-balance credit authorization creates at most one invoice, then turns off. You review and approve the monthly amount and schedule before authorizing recurring payments. Contreol does not directly charge your card or bank account. Sandbox exercises never publish customer sites. Intuit handles payment information under its privacy statement and payment terms. Contreol does not collect card numbers, security codes or bank login credentials.

The administrator can disconnect the billing integration and revoke access. Existing customer mappings, audit records and billing records are not automatically deleted. Disconnection does not cancel services or invoices; use your account’s cancellation controls or contact support.

Information from your website visitors

If you enable discussions, comments, attachments or custom applications, Contreol may store visitor submissions, uploaded files, access records and application data needed for those features. Public posts and attachments are visible according to your website’s settings. You are responsible for appropriate visitor notices, permissions and moderation for the website you operate. DOYJO LLC processes this information to host and operate the features you request and to protect the service. Visitors can contact the website operator or DOYJO LLC about the handling of their information.

DOYJO LLC determines how information is used for account administration, billing, security and our marketing. Customers ordinarily determine the purposes of processing visitor submissions and application data that we host on their instructions. Applicable law and required data-processing agreements govern each party’s obligations. Customer responsibilities do not remove DOYJO LLC’s legal duties. Visitors should contact the website operator about its collection practices, and may also contact us about information we handle.

5. Cookies, browser storage and outside links

Essential cookies support customer and administrator sessions, security checks and the administrator billing-connection authorization flow. The optional local-backup setting keeps draft information and selected media in browser storage on your device. Your signed-in project is also saved on the server. Disabling or clearing a local backup does not delete your server-side account or project.

You can manage cookies and stored site data through your browser. Clearing essential cookies signs you out. If you use externally hosted image or video URLs, your browser may contact those hosts, which receive technical request information. Following links to stock-media sites, reference sites, Intuit or other providers brings you under their own privacy practices.

Optional Analytics and advertising measurement

With your permission, DOYJO LLC uses Google Analytics on Contreol to understand visits, traffic sources, account creation, invoice requests, confirmed paid orders and website publication. Measurement includes a browser identifier, technical browser information and general page or event information. Google may use technical information such as your IP address to derive approximate location under its own practices. We do not send chat text, uploaded files, website drafts, names, email addresses, phone numbers, private page addresses, payment credentials or our internal costs to Analytics.

Choosing Analytics allows us to associate your browser identifier with your Contreol account privately so that a later confirmed invoice payment can be measured even if you do not return to the site. Only the pseudonymous identifier and limited order fields described above are sent to Google. An invoice request is not reported as a paid order. Included or promotional AI credit is not reported as a purchase.

Advertising measurement is a separate optional choice. If allowed, Google can connect ad identifiers and our conversion events to advertising performance through a linked Google Ads account. Personalized advertising and Google Signals are not enabled. A browser Global Privacy Control signal keeps advertising measurement off. This choice does not subscribe you to marketing email.

Google tracking does not load before you allow Analytics. Choose Essential only to keep it off, or reopen Cookie choices in the footer to change or withdraw your permission. Declining has no effect on your editor, account, prices or service. Your browser choice lasts up to six months. Google Analytics event data is retained for two months in this property; aggregated reports may remain longer. Our local measurement queue removes attribution payloads after delivery or expiry, while retaining pseudonymous event keys to prevent duplicate reporting. Ordinary billing records are retained separately as described in this policy. Withdrawal stops future measurement; contact us about previously collected data.

Google explains its processing at How Google uses information from sites that use its services. Measurement covers Contreol’s service, not automatic installation of this tag on customers’ published websites. Administrators’ testing workspaces and embedded previews are excluded.

Pseudonymous identifiers do not directly contain your name or email, but can still be linked to a browser, account or transaction and may be personal information. They are not necessarily anonymous. The purposes, fields shared and optional controls described here still apply.

6. Storage, security and retention

Contreol's current application server is hosted in the United States. Providers may process information in other locations under their applicable arrangements. Account records, unpublished drafts, private uploaded media and billing connection data are stored outside the public website directory with access controls. A published website contains the pages and selected media authorized for publication. Private design conversations, credentials and accounting records are excluded from published files. Connections to Contreol use HTTPS. No online service can guarantee absolute security.

Accounts and drafts are retained so you can return to your work; they do not currently expire automatically. We retain service, transaction, consent and security records as needed to provide the service, maintain records, resolve disputes and meet applicable obligations. The service does not currently offer an automatic account-deletion button or a fixed deletion interval for every record.

You can request closure or deletion using the contact below. We will review the request, verify authority where needed, and explain any records that must be retained. Removing information from Contreol does not itself remove records retained by Intuit or another provider under its separate obligations.

The saved AI requests, provider responses and task records described in section 3 follow this request-based retention process. Dismissing a recovery item does not necessarily delete its stored records. Retention is not a promise of permanent storage or recovery.

7. Your choices and how to contact us

If you use the public contact or bug report form, we receive the name, email address and details you submit. Reports are emailed to support@contreol.com and forwarded to our support inbox at Gmail so we can investigate and reply. The visitor email address is used as Reply-To. Do not include passwords, recovery codes, payment details or other sensitive information in these forms. We keep support correspondence as needed to resolve the request and maintain service records. Marketing follow-up is optional and is separate from creating an account or authorizing a payment. You can change the email preference in your account or contact us. Necessary account, support and billing communications are separate from marketing.

You can edit your website draft, choose whether to request AI assistance, and control the optional local backup. Manage services lets you cancel hosting or email renewals, change mailboxes, and manage AI refill invoices. Cancellation is separate from account closure or deletion; it keeps stored work and messages available for restoration under the service terms. For access, correction, deletion, account closure or other privacy requests, email brianbateman@doyjo.com or call (920) 285-7570. Identify your account and the request without sending passwords, recovery codes or card details.

Depending on your location, the information involved and whether a law applies to our services, you may have rights to access, correct, delete or obtain a portable copy of personal information; withdraw consent; object to or restrict certain processing; opt out of specified sales, sharing or targeted advertising; appeal a denied request; or complain to the applicable regulator. These rights can have exceptions. Contact brianbateman@doyjo.com or (920) 285-7570 to submit a request or appeal. We may verify your identity and an authorized agent’s authority using information proportionate to the request. We will explain a denial and available appeal routes where required and respond within applicable legal deadlines. We will not unlawfully discriminate against you for exercising a privacy right.

Contreol accounts and purchasing services are intended for adults aged 18 or older. We do not knowingly solicit personal information from children under 13 for our own account services. If you believe a child has supplied such information, contact us so we can investigate and take appropriate action. Customers must not use Contreol for child-directed services or collection requiring children’s privacy consents unless we separately agree in writing to the necessary safeguards. An adult-account rule does not determine the ages of visitors to customer-operated websites.

We may update this policy as our services, technology, information practices or legal requirements evolve, and will identify revisions by date and version. For material changes, we will provide notice through the service or another appropriate channel before they take effect, and obtain consent where required by law. A policy update, or continued use of Contreol, does not itself authorize a new use of previously collected information that requires separate consent. The continued-use provisions in the Terms and EULA do not replace a required privacy consent or change your optional measurement choices. Earlier privacy policy, version 2026-09-22.3.

Write to DOYJO LLC, 1108 Indiana Avenue, Sheboygan, Wisconsin 53081. Previous Privacy Policy (version 2026-09-29.1). Copyright notices and counter-notices are handled under our Copyright complaints procedure; relevant notices, including contact details where required, may be shared with the parties to a complaint.

Business email credentials and messages

If you order business email, Contreol processes the mailbox names and passwords needed for setup. Pending mailbox passwords are encrypted and removed from the setup queue after the mail server confirms the change. The mail server stores the credentials needed to authenticate your mailbox and the messages you receive and send. Passwords are not included in customer status responses or sent to the AI designer. Domain verification and routing records are retained to connect the correct website and email service to your account.