Meta Platform Data Use
Last updated: 2 November 2026
Whatsaff, operated by AWstreams DMCC, uses data from Meta (Facebook, Instagram and WhatsApp) only to provide the features the business account holder turns on. This page lists each permission we may request and what we do with it. We request only the permissions a feature needs, when you connect that feature.
What we use each permission for
| Permission | Use |
|---|---|
| whatsapp_business_management | Read and manage the WhatsApp Business Account you connect: phone numbers, message templates, quality rating and webhook subscription, so you can create templates and see their status in Whatsaff. |
| whatsapp_business_messaging | Send and receive WhatsApp messages and calls for your business from the Whatsaff inbox, campaigns and automations, and receive delivery and read statuses. |
| business_management | Find the Meta Business portfolio that owns the WhatsApp Business Account during Embedded Signup, so the account is linked to the right business. |
| pages_show_list, pages_manage_metadata, pages_read_engagement, pages_manage_engagement | List the Facebook Pages you choose to connect, subscribe them to webhooks and reply to Page messages and comments from the Whatsaff inbox. |
| instagram_basic | Identify the Instagram professional account linked to your Page so its messages appear in the Whatsaff inbox. |
| catalog_management | Sync the product catalog you connect so you can send product messages on WhatsApp. |
| ads_read, ads_management, pages_manage_ads, leads_retrieval | Track Click-to-WhatsApp ads and import leads from your lead ads into Whatsaff contacts, only for ad accounts and Pages you connect. |
| email, public_profile | Identify you when you sign in with Facebook. |
What we never do
- Sell or rent Meta Platform Data, or share it with data brokers.
- Use it for advertising targeting, profiling or surveillance.
- Use one business's data for another business, or to train models for anyone else.
- Message people who have not opted in to hear from the business.
Service providers
- Service providers: hosting, storage, email delivery, analytics and payment processors acting on our instructions under confidentiality and data-protection terms.
- Sub-processor for optional AI features: OpenAI, a processor whenever a business turns on an optional AI reply or suggestion feature; only the message text needed for that reply is sent. Your team can take over any conversation at any time.
Storage and security
Access tokens are encrypted at rest; webhooks from Meta are verified by signature; access to production data is limited to staff who need it to run the Service. Data is retained and deleted as described in our Privacy Policy and Data Deletion Instructions.
Contact
Questions about how we use Meta Platform Data: info@awstreams.com.