This Meta app privacy policy explains how Chatbyte GmbH ("Chatbyte", "we", "us") processes data when a Chatbyte customer connects Meta channels to the Chatbyte platform. It supplements the general Chatbyte privacy policy and the Chatbyte terms.
Controller: Chatbyte GmbH, Gertigstraße 69, 22303 Hamburg, Germany. Commercial Register: HRB 187972. Register Court: Amtsgericht Hamburg. VAT ID: DE452019271. Email: contact@chatbyte.ai.
Document version: 1.1.
Effective date: May 13, 2026.
Related documents: Chatbyte Privacy Policy and Chatbyte Terms of Service.
1. Scope
Chatbyte provides a SaaS platform that allows business customers to manage conversations and automations across connected channels. This document applies when a customer connects Meta products such as Facebook Pages, Messenger, Instagram professional accounts, or WhatsApp Business accounts, where these integrations are available in Chatbyte.
For the personal data of our customers' own end users, Chatbyte often acts as a processor or service provider for the Chatbyte customer. The Chatbyte customer remains responsible for having a lawful basis, providing required notices, and honoring end-user rights for the channels they connect.
2. Data We Receive From Meta Channels
Depending on the connected Meta channel and granted permissions, we may process:
- Meta business, page, account, app, and channel identifiers needed to connect and maintain the integration.
- Page, profile, account, or channel names and configuration data exposed by Meta for the connected channel.
- Access tokens, refresh tokens, permission scopes, expiry timestamps, and connection status data.
- Conversation and message data, including message text, attachments, sender identifiers, recipient identifiers, timestamps, delivery status, read status, and other message metadata.
- End-user profile information made available by Meta for the relevant conversation, such as display name or profile identifiers.
- Technical logs, API responses, webhook payloads, security events, and audit logs needed to operate, secure, and troubleshoot the integration.
3. How We Use This Data
We process Meta channel data to:
- authenticate and maintain the customer's Meta channel connection;
- receive, display, route, and send messages in the Chatbyte inbox;
- power AI-assisted customer support workflows configured by the customer;
- hand conversations over to human team members when needed;
- sync channel state, delivery state, and integration health;
- protect the platform against abuse, errors, and unauthorized access;
- comply with applicable laws, platform rules, and contractual obligations.
4. Legal Bases
For Chatbyte customer account data, we generally process data to perform the contract with our customer, comply with legal obligations, and pursue legitimate interests such as platform security and support. Where consent is required, the customer is responsible for obtaining it from their end users before using the connected Meta channel.
5. Sharing and Subprocessors
We do not sell personal data received from Meta. We may share data with service providers that help us operate Chatbyte, such as EU-based hosting, infrastructure, monitoring, security, support, and Microsoft Azure OpenAI in the EU where the customer has enabled AI-assisted workflows. These providers are bound by contractual confidentiality and data protection obligations. If a customer connects additional tools, data may be sent to those tools according to the customer's configuration.
6. Retention
We retain Meta channel data only for as long as needed to provide the Chatbyte service, comply with legal obligations, resolve disputes, enforce agreements, maintain security, or support audit and billing requirements. Customers can disconnect a Meta channel from Chatbyte. Deletion requests are handled as described in our data deletion instructions.
7. Security
We use technical and organizational measures to protect personal data, including encrypted transport, access controls, role-based permissions, audit logging, and security monitoring. No internet service can guarantee absolute security, but we design our systems to reduce unauthorized access and data loss risks.
8. Your Rights and Requests
You may have rights to access, correct, delete, restrict, object to, or receive a copy of your personal data depending on applicable law. If you are an end user of a business that uses Chatbyte, please contact that business first because it controls how it uses Chatbyte and its connected Meta channels. You can also contact Chatbyte at contact@chatbyte.ai.
9. Changes
We may update this document when our Meta integrations, processing practices, or legal requirements change. The current version and effective date are shown at the top of this page.