Meta API usage (Facebook and Instagram)

01What Ma Belle Note does with your Facebook Page and Instagram account

When you connect a Facebook Page or an Instagram professional account to an establishment in Ma Belle Note, the product performs, on your behalf and with your explicit permission, only the following operations:

• List the Facebook Pages you manage, so you can choose the one that belongs to the establishment.
• Identify the Instagram professional account you authorized, to show its username and profile picture in the establishment.
• Publish your posts (text and photo) on the Facebook Page and Instagram account you ticked, right away or at the date you scheduled.
• Delete a Facebook post published from Ma Belle Note, when you ask for it.

Each post is sent only when you click "Publish", or at the date and time you chose. Nothing is published automatically, neither by artificial intelligence nor by the autopilot.

Instagram does not let an app edit or delete a published post: an Instagram post is edited or deleted from the Instagram app. Ma Belle Note warns you before every Instagram publication.

No other operation is performed. We do not read messages, comments, followers or insights of your Page or account, we do not create ads, and we do not change the settings of the Page, the account or your business portfolio.

02Which permissions are requested and why

pages_show_list

List the Pages you manage so you can choose the establishment's Page. Only the chosen Page's ID, name, picture and address are stored.

pages_manage_posts

Publish on the chosen Page the posts you wrote and confirmed, and delete a post when you ask for it in Ma Belle Note.

pages_read_engagement

Required by Meta together with the previous permission to obtain the Page token and read its basic fields (name, picture, address). We do not read insights or comments.

business_management

Allow access to a Page or Instagram account owned by a business portfolio (often managed by an agency), and know which Instagram account you assigned to Ma Belle Note. Nothing else is read or changed in the portfolio.

instagram_basic

Read the ID, username and profile picture of the Instagram account you authorized. We do not read its media, followers or insights.

instagram_content_publish

Publish the photo and caption of your posts on this account, right away or at the scheduled date.

03How your consent is obtained

The Meta login is never started in the background. It only starts when you click "Connect Facebook" or "Connect Instagram" in the establishment's "Social networks" tab.

On Meta's official screen, you then choose the Pages or the Instagram account Ma Belle Note may access, and you see the list of requested permissions. For Facebook, you finally choose in Ma Belle Note the Page to attach to the establishment.

04Data stored and use

• Data stored: IDs, names and profile pictures of the connected Page and Instagram account, ID of the Meta account that granted access, access tokens (encrypted), and, for each published post, its ID and link on Facebook or Instagram.
• Use: only to publish, at your request, the posts you write in Ma Belle Note, and to show you where they were published.
• No resale, no advertising: this data is never sold, rented, used for profiling or targeted advertising, or shared with any third party other than the application's hosting provider.
• Photos: a post's photo is kept on our servers until it is published on the chosen networks, then for one hour at most.

05Token storage and security

• Meta access tokens are encrypted at rest in our database.
• They are never exposed to the browser, never sent to a third party, never included in an email or a log.
• Only the services strictly needed for publishing can decrypt them, for the duration of a call to Meta's API.

06How to revoke access

You can stop Ma Belle Note's access to your Page or Instagram account at any time:

1. From Ma Belle Note: establishment's "Social networks" tab, "Disconnect" button on the Facebook or Instagram card. Tokens and the connection are deleted immediately.
2. From Facebook: Settings & privacy › Settings › Business integrations (or Apps and websites), then remove Ma Belle Note.
3. From your Meta business portfolio: Settings › Integrations, then remove Ma Belle Note's access.

After a revocation, nothing is published anymore: a scheduled post that has not been sent yet is cancelled. Posts already published stay on Facebook and Instagram, where you can manage them.

07Deleting your data

You can ask for the deletion of the Meta data kept by Ma Belle Note in two ways:

• from Facebook, by removing Ma Belle Note and then requesting the deletion of your data from the app: Meta forwards the request and we immediately delete your connections, tokens and attached Pages and accounts, and cancel your scheduled posts;
• by email to [email protected], stating the establishment concerned: we process the request within 30 days at most.

Status of a request sent by Facebook: if you reached this page from Facebook with a confirmation code, your request was received and the deletion was carried out upon receipt. Keep this code: just give it to us for any question about your request.

08Contact

For any question about this use of Meta's APIs, write to us at [email protected]. We reply within 5 business days.

This page is updated whenever our Meta integration changes (new permission, new operation, storage change).