How this app uses Meta APIs

1. Connect

A signed-in client uses Facebook Login for Business. This website never asks for a Facebook password.

2. Permissions actually used

• ads_read — Marketing dashboard read — status: APP REVIEW REQUIRED
• ads_management — Campaign pause/resume/budget after CONFIRM — status: APP REVIEW REQUIRED
• business_management — Business + WABA listing — status: APP REVIEW REQUIRED
• pages_show_list — Pages module — status: APP REVIEW REQUIRED
• pages_read_engagement — Page insights when connected — status: APP REVIEW REQUIRED
• leads_retrieval — Lead ads webhook + forms — status: APP REVIEW REQUIRED
• whatsapp_business_management — WABA / templates — status: APP REVIEW REQUIRED
• whatsapp_business_messaging — Inbound/outbound Cloud API — status: APP REVIEW REQUIRED

Advanced Access is not claimed unless Meta’s UI shows it as granted.

3. Data handling

Tokens are encrypted at rest. API logs never store full tokens. WhatsApp messages belong to the connecting user only (tenant isolation).

4. Disconnect

Client portal → WhatsApp → Disconnect removes the stored token for that user.

5. Deletion

Data deletion requests are recorded with a confirmation code. Support: /contact or ads@imranahmedmoshio.com.

6. Webhooks (production)

• https://imranahmedmoshio.com/api/meta/webhooks (all)
• https://imranahmedmoshio.com/api/meta/whatsapp/webhook (whatsapp)
• https://imranahmedmoshio.com/api/meta/ads/webhook (ads)
• https://imranahmedmoshio.com/api/meta/leads/webhook (leads)

App Review is not submitted from this page.