Your info, handled like your car.

02Who we are

Mesquite Auto Force is an automotive service shop at 4036 I-30 Frontage Rd, Mesquite, TX 75150. We operate this website, mesquiteautoforce.com, and run the booking, callback, contact, jobs, chat, and financing flows on it. When this policy says "we," "us," or "the shop," it means the business operating from that address.

03What we collect

We collect different information depending on which form or feature you use. The minimum we need in each case:

• Booking an appointment. Name, phone, and the vehicle's year / make / model. Email is optional but recommended for confirmation copies. If you book tires, we also record brand, model, size, and quantity; if you book service, we record which service you picked. Any free-text notes you add are saved verbatim.
• Callback requests. Name, phone, and your best time to be reached.
• Contact form. Name, message, and any of email, phone, and subject you choose to share.
• Job applications. Full name, phone, email, the position you're applying for, years of experience, and your free-text message.
• AI chat. The text of your conversation with our online assistant, including any contact details you choose to share. The chat assigns your browser a temporary session id so we can follow the thread on return visits.
• Cancellation links. When we email you a booking confirmation, the email includes a one-time cancel link bound to a token we generate. The token is the only thing the link carries — it does not include your name, phone, or vehicle.
• Device basics. When you submit any form we record your IP address, browser user-agent string, and language preference for security, anti-spam, and debugging. We never sell or share these for advertising.

We do not collect financial account numbers, social security numbers, or government IDs through this website. If you apply for financing in person, the lender — not us — handles that data; see "Financing partners" below.

04How we use it

• Schedule and confirm your appointment.
• Send reminders, status updates, and follow-ups about the work on your vehicle (email through Resend, SMS through Twilio — see "Service providers" below).
• Reply to questions you send through chat, contact, email, or phone.
• Diagnose patterns in the data so we can improve scheduling, repair quality, and the shop's process.
• Keep our website secure and prevent abuse (Turnstile, rate limits, audit logs).
• Comply with tax and warranty record-keeping required by Texas law.

We do not use any of this data for behavioral advertising. We do not profile you for marketing decisions. We do not sell, rent, or trade your information.

05Service providers we share data with

The shop runs lean. We use a small number of trusted vendors to send email, text messages, host the site, and answer chat. Each one only gets the data it needs to do its job, governed by its own privacy terms.

• Resend (email delivery). When we send you a booking confirmation, reminder, or reply to a contact form, Resend handles the actual email transport. Resend receives your email address, the message body we send, and standard email metadata.
• Twilio (SMS / phone). When you opt in to text reminders or callback messages, Twilio handles the actual SMS transport. Twilio receives your phone number and the message body. If you reply STOP to any text, the opt-out is recorded in our database and the number is removed from future shop-initiated texting.
• Cloudflare Turnstile (bot protection). Our public forms (book, contact, callback, jobs) run a one-time bot check via Turnstile. Cloudflare receives a short-lived browser challenge token and your IP address; it does not receive form contents.
• AI provider (online chat). Our chat widget routes your conversation through a large-language-model provider so the assistant can answer questions about hours, services, and pricing. The provider receives the conversation transcript; it does not receive your contact details unless you type them into the chat yourself. We choose providers whose terms prohibit using customer data to train their public models, but you should treat any chat transcript as if it were stored.
• Hosting infrastructure. Our site runs on a managed server with standard log files (IP, request path, timestamp). The hosting provider does not receive form contents or chat transcripts beyond what's required to route the request.
• Google Analytics 4 (site analytics). Aggregated page-view and navigation data so we can see which pages drivers use and improve the site. Configured for analytics only — never advertising — and your data is not sold.
• Microsoft Clarity (usage insights). Anonymized session interactions and heatmaps (clicks, scrolls) with automatic masking of text you type, so we can find and fix confusing spots. Not used for advertising.
• Financing partners (when applicable). When you choose to apply for financing in the shop, the financing partner — not us — runs the credit check and decides on approval. We share only the information you authorize on their application; their privacy terms govern from that point. The shop receives back only the approve / decline decision and the amount approved.
• Law enforcement. We share information only when legally required (subpoena, court order, valid government request).

06Cookies and online tracking

The customer side of this website uses a small number of strictly-necessary cookies (for example, to remember your language preference) plus two privacy-respecting analytics tools. We run no third-party advertising trackers, we do not sell your data, and we do not use any of this for behavioral advertising or profiling.

Analytics we use: Google Analytics 4 and Microsoft Clarity. In aggregate, they show us which pages visitors reach, how they move through the site, and where it's confusing, so we can improve it. Google Analytics uses cookies and reports aggregated traffic; Microsoft Clarity records anonymized session interactions (clicks, scrolls, and heatmaps) with automatic masking of any text you type into forms.

The admin side of the site uses a session cookie for staff log-in; that cookie never travels with customer-facing pages.

To opt out: most browsers let you block or clear cookies, Google offers an official Analytics opt-out browser add-on, and Microsoft Clarity honors your browser's Global Privacy Control / Do-Not-Track signal.

07SMS / text-messaging consent

If you provide your phone number on a booking, callback request, or chat, you consent to receive text messages from us about that specific appointment or request. Standard message and data rates may apply. We use SMS only for shop business: appointment confirmations, reminders, "your car is ready" updates, callback acknowledgments, and the operator's reply if you texted us first.

Reply STOP to any of our texts to opt out at any time. The opt-out is recorded in our database immediately and our system will not initiate further texts to that number. You can reply HELP for contact information. If you change your mind, ask any staff member or email info@mesquiteautoforce.com and we'll re-enable SMS for your number.

We do not send marketing texts. We do not buy or rent SMS lists.

08Email communications

Transactional emails (booking confirmations, reminders, cancellation links, "we got your message" replies) are sent through Resend with DKIM-aligned signing so your email client can verify the message came from us. We do not currently send marketing email. If we ever do, the email will carry a one-click unsubscribe in compliance with the federal CAN-SPAM Act, and your address will be removed within 10 business days of an unsubscribe request.

09How long we keep data

• Customer service records (appointments, work performed, notes): retained as long as you remain a customer plus seven years, to cover warranty claims, tax, and audit obligations under Texas law.
• Callback requests, contact form messages, job applications: retained for three years from submission unless the operator marks the entry for longer retention. Job applications for candidates we hired follow the longer employment retention window.
• AI chat transcripts: retained up to 365 days to help us diagnose and improve the assistant. Operators can delete a transcript on request.
• Audit log (every staff and agent action on the system): retained for 365 days, then archived. We never delete the audit log without a court order.
• Error reports (browser-side bug telemetry): retained up to 90 days for debugging, then purged automatically.
• SMS opt-out list: retained indefinitely so we never re-text a number that asked us to stop.

10Your rights

You can:

• See what we have. Request a copy of the information we hold about you. We respond within thirty days.
• Correct it. If a phone number, vehicle, or email is wrong, email us or call and we'll update it.
• Delete it. Ask us to delete your contact information and any non-business-required records. We keep the minimum needed for warranty and tax purposes (see retention above).
• Opt out of SMS. Reply STOP to any text, or email us.
• Opt out of marketing email. Click "unsubscribe" in any marketing email or email us. (We do not currently send marketing email, but this right applies if that changes.)

Texas residents have additional rights under the Texas Data Privacy and Security Act (effective July 1, 2024) including the right to know whether your data has been sold or used for targeted advertising. Our answer is consistently "no, neither" — but the formal right to ask is yours.

To exercise any of these rights, email info@mesquiteautoforce.com or call (888) 348-4808. We respond within thirty days.

11Security

• Staff passwords are hashed with argon2id and never stored in plaintext.
• Staff sign-in requires two-factor authentication via SMS.
• All API secrets (email keys, SMS keys, AI keys) are stored encrypted at rest.
• The bearer tokens used by our AI agent are SHA-256 hashed, IP-locked, rate-limited, and rotatable.
• Customer data in transit is protected by TLS 1.2+.
• All staff actions are recorded in an immutable audit log.
• Public forms are protected by Cloudflare Turnstile and per-IP rate limits.

No system is perfectly secure. If we ever experience a security incident affecting your information, we will notify you in accordance with Texas Business and Commerce Code § 521.053 and any federal requirements that apply.

12Children

This website is not directed to children under thirteen. We do not knowingly collect personal information from anyone under thirteen. If you believe a child has submitted information through this site, email us and we will delete the entry.

13Choice of law

This policy is governed by the laws of the State of Texas, without regard to conflict-of-law principles. Any dispute arising from it will be resolved in the state or federal courts located in Dallas County, Texas.

14Changes to this policy

We may revise this policy from time to time. The current version is always posted here with an "effective" date. Material changes (adding a new vendor, changing what we collect, lengthening a retention period) will be summarized in the change banner at the top of this page for thirty days after the change goes live.

15Contact

Mesquite Auto Force · 4036 I-30 Frontage Rd, Mesquite, TX 75150 · (888) 348-4808 · info@mesquiteautoforce.com