Effective: August 28, 2026
Appointments and customer information
The booking page lets you choose a service, then loads the configured booking provider when you open scheduling. Only the selected service is prefilled; contact and vehicle details are entered directly with the provider. While Cal.com is used as the temporary scheduler, information entered there is handled by Cal.com and must be transferred into Tekmetric by authorized shop staff. This website does not maintain a duplicate customer, vehicle, repair-order, or service-history database.
Mechanic applications
When you apply through the careers form, EXA collects the contact, experience, role, and consent information you provide. Application records are stored in a private website database. An optional PDF résumé is stored in private file storage and is not published at a permanent public URL.
Applications are assigned a deletion date 12 months after submission unless EXA must retain the record longer for an active hiring process or legal obligation. Applicants may request access, correction, or deletion by calling (267) 993-9777.
Analytics and advertising measurement
Google Tag Manager loads when a page opens, with analytics and advertising storage denied by default. Microsoft Clarity and Google Analytics 4 are permitted to run only after you choose “Allow analytics.” Clarity provides aggregated usage information, heatmaps, and session replays so EXA can identify confusing or unhelpful parts of the website. Google Analytics 4 provides aggregate traffic and interaction measurement. In Google Analytics 4, automatic form-interaction measurement is off, account data-sharing settings are off, and event- and user-level data retention is set to 14 months.
After you allow analytics, Clarity and Google Analytics 4 may receive the page URL or path, referral source, approximate location, browser and device information, visit timing, and pseudonymous browser identifiers stored in analytics cookies. EXA sends only these named custom interaction events through Google Tag Manager: application_complete, application_start, book_service_start, booking_calendar_open, call_click, career_view, directions_click, service_view, text_click, and whatsapp_click. The custom parameters EXA adds are limited to page_path and, only for Cal.com booking starts and calendar opens, booking_provider. EXA does not include names, phone numbers, email addresses, vehicle details, résumé contents, or message text in those event parameters. The mechanic application form and its confirmation are explicitly masked from Clarity.
For EXA's Google Analytics events, the standard page_location and page_referrer fields are fixed to https://exaautomotors.com/. Page-level context is supplied only through the approved page_path value. This prevents query strings, arbitrary URL paths, and detailed referrer URLs from entering Google Analytics through those fields.
The website also applies a strict-origin referrer policy. When the browser sends a referrer to another page or service, it sends only the site origin rather than the prior page's path, query string, or fragment.
Your choice is stored in your browser. Clearing browser storage clears that choice. Choosing “Only necessary” leaves optional analytics disabled. The “Analytics choices” control in the footer lets you reopen the choice at any time. Choosing “Only necessary” sends a denied-consent update and reloads this page plus other open EXA tabs that have analytics enabled. When another open EXA tab receives notice that the stored choice was removed or browser storage was cleared, that tab also sends a denied update and reloads. Optional measurement remains off after those pages reload; when the stored choice was removed, the choice prompt returns.
Spam prevention and security
Website-owned forms use Cloudflare Turnstile, same-origin checks, validation, duplicate protection, and rate controls. A short-lived, one-way hash derived from network information may be used to control abuse; raw IP addresses are not intentionally retained in the application database.
Service providers
The website uses Vercel for hosting and private files, Neon for mechanic-application records, Resend for application notifications, Cloudflare Turnstile for abuse prevention, Google Tag Manager for consent-aware tag delivery, Google Analytics 4 for optional aggregate traffic and interaction measurement, and Microsoft Clarity for optional website-usage analytics. Google Analytics 4 and Clarity are permitted only after you allow analytics. Booking is handled by the provider configured at the time you use the site. The optional WhatsApp link opens WhatsApp; messages sent there are handled by WhatsApp rather than submitted to this website.
Questions
For privacy questions about this website, call (267) 993-9777or write to Exa Auto Motors LLC, 7039 Mill Creek Rd, Levittown, PA 19057.