Meta is updating its terms for businesses: from October 30, 2026 the company will be able to automatically scan websites tied to business accounts and ad accounts on Facebook, Instagram and WhatsApp. There is no separate opt-out. Nieman Lab and other outlets dissected the wording, and lawyers and publishers raised alarms over possible AI training on third-party content. Here is what the new terms actually say, who is affected, what Meta has already revised and what site owners and advertisers should do.
What changes on October 30, 2026
That is when the updated Commercial Terms and Self-Serve Ad Terms take effect. Meta presents it as consolidation: the Product Catalog Terms are folded into the Commercial Terms, and the Ad Creative Generative AI Terms into the Self-Serve Ad Terms. The company announced the change in the Business Help Center and in Meta Business Suite in early October.
Who is affected: any business account is enough
The terms cover business accounts that manage Pages and groups, run ads, send marketing messages or work in Business Suite and Ads Manager. That is not only large advertisers, but any business and any affiliate with an ad account.
What exactly do Meta's new terms allow?
- Automated access to websites. Meta and those acting for it can use scrapers, bots and crawlers to access, index, cache, analyze, collect and retrieve content from domains and pages tied to a business's products or services.
- Periodic updates. The company can pull fresh data from those pages regularly.
- Test credentials. Meta may create them in order to get into a site.
Can you opt out of Meta scanning your website?
There is no separate opt-out. The notice says that if you do not agree to the updated terms, you should stop using Meta's products for business or commercial purposes. In practice, continuing to use a business account after October 30 counts as consent.
Will Meta train AI on content from websites?
The first draft of the terms allowed using collected content to train Meta's products, which angered lawyers and publishers who feared free appropriation of copyrighted material. After the criticism Meta removed that sentence, as Unite.AI reports, limiting the purpose to developing, improving and supporting advertising and business products, and to platform security and integrity. Wording may differ by region.
What does Meta say?
A company spokesperson said it is a consolidation of language previously scattered across different documents and that how publishers are crawled will not change. According to the spokesperson, site owners can still manage access through robots.txt. Communications VP Andy Stone wrote that the update is meant to pull accurate product information from third-party sites for ad and content recommendations, not to scrape news sites. Legal experts quoted by Nieman Lab still say the terms give Meta an argument that they override robots.txt instructions.
What should site owners and advertisers do before October 30?
- Check which domains and pages are tied to your business accounts and ad accounts.
- If you want to limit access, set up robots.txt for Meta's crawlers. The company runs several crawlers with different purposes; check its documentation for the exact list and names.
- If you manage client accounts, warn the clients: they accept the update automatically too.
- A week after the date, check your server logs to see how the crawler actually behaves.
What does it mean for affiliates and advertisers?
For people running traffic through Meta ad accounts, the main takeaway is simple: the sites you point ads to should be ready for regular automated visits. Disguising content from review is already prohibited by Meta's advertising rules (cloaking), and now the company also has the stated right to automatically access pages. That is our reading of the terms, not a statement from Meta.
What is still unclear
How Meta will apply the new terms in practice, and how the wording differs by country, is not yet clear. Lawyers keep arguing over how far the terms override robots.txt. It is also an open question how the company will react if regulators or publishers force changes before October 30.
FAQ
When will Meta start scanning advertisers' websites?
From October 30, 2026, when the updated Commercial Terms and Self-Serve Ad Terms take effect.
Who is affected by Meta's website scanning?
Owners of Facebook, Instagram and WhatsApp business accounts: those who manage Pages, run ads, send marketing messages or work in Business Suite and Ads Manager.
Can I opt out of website scanning?
There is no separate option. Meta tells those who disagree to stop using its products for commercial purposes. You can restrict crawlers via robots.txt, which Meta says still works.
Will Meta train AI on my website?
The original draft had such wording, but after criticism Meta removed the training sentence and limited the purposes to advertising and business products and security. Wording may differ by region, so check the terms for your country.
Why would Meta scan advertisers' websites?
According to the company, to get accurate information about products on third-party sites for ad and content recommendations, and for platform security.
Will robots.txt help?
Meta says site owners can manage access via robots.txt. Lawyers note the terms formally give the company an argument to the contrary, so it is worth checking your logs.
What happens if I do not accept the terms?
Continuing to use business tools after October 30 counts as consent. Meta tells those who disagree to stop using its products commercially.
Does this apply to agencies and people managing other people's accounts?
Yes, every business account accepts the terms, so agencies should warn clients in advance.