Meta Services Notice

TourOmni integrates with several Meta Platform services to provide unified messaging, social media communication, and authentication features within our travel management platform. This page explains which Meta services we use, what data is accessed, and how we handle that data in compliance with the Meta Platform Terms and the Meta Developer Policies.

Meta services we use

TourOmni uses Meta's APIs and platform services to enable the following features within the platform:

How we access and use Meta Platform Data

When a Tenant connects their WhatsApp Business account, Facebook Page, or Instagram Professional account to TourOmni, or when a user chooses to log in via Meta Login, we request only the permissions (scopes) necessary to deliver the specific feature being enabled. We access Meta Platform data solely to provide and improve the platform features that are visible and prominent in the TourOmni user interface.

Specifically, TourOmni uses Meta Platform data to:

• Route inbound WhatsApp, Facebook Messenger, and Instagram messages to the correct Tenant's unified messaging inbox
• Send outbound messages on behalf of the Tenant to their customers and suppliers via connected messaging channels
• Display message history and conversation threads within the TourOmni dashboard
• Track message delivery and read status to help Tenants manage customer communications
• Authenticate users who choose to log in via Meta Login, using only the basic profile information they authorise
• Link incoming messages to existing CRM records (leads, bookings, customer profiles) within the Tenant's data environment

Meta Platform Terms: compliance statement

In accordance with Meta's requirements, TourOmni:

• Limits data use to providing or improving user-facing features within the TourOmni platform. We do not use Meta Platform data for purposes unrelated to the platform's core functionality.
• Does not sell Meta Platform data to any third party, and does not use it for independent advertising, data brokering, or ad-targeting purposes.
• Does not share Meta Platform data with third parties except as necessary to provide or improve user-facing features (e.g., cloud infrastructure for hosting), to comply with applicable law, or as part of a merger, acquisition, or asset sale with prior notice to users.
• Does not use Meta Platform data for surveillance or to provide tools, data, or services to any entity involved in surveillance activities.
• Maintains data security measures including administrative, physical, and technical safeguards that meet or exceed industry standards to protect the confidentiality, integrity, and availability of Meta Platform data.
• Handles login credentials responsibly. We do not solicit, collect, store, cache, or proxy Facebook or Instagram login credentials. Meta Login is implemented via OAuth and users authenticate directly with Meta.

WhatsApp Business API

TourOmni's use of the WhatsApp Business API is subject to additional terms and requirements:

• Opt-in requirement: Tenants are responsible for obtaining proper opt-in consent from their customers before sending WhatsApp messages. TourOmni provides tools to help manage consent, but the Tenant is solely responsible for ensuring compliance with WhatsApp's opt-in policies and applicable communications laws.
• Message templates: outbound messages initiated by Tenants outside of a 24-hour customer service window must use pre-approved WhatsApp message templates, in accordance with WhatsApp Business API policies.
• Prohibited content:Tenants must not use the WhatsApp Business integration to send spam, unsolicited marketing messages without consent, or any content that violates WhatsApp's Commerce Policy or Business Policy.
• Data handling:WhatsApp message content and metadata are stored within the Tenant's isolated data environment on TourOmni's cloud infrastructure. Messages are encrypted in transit (TLS) and subject to the same security measures applied to all platform data.

Data storage and security

Meta Platform data accessed by TourOmni is stored within our secure cloud infrastructure (Amazon Web Services) and is subject to the same security measures applied to all platform data:

• Encryption in transit (TLS) and at rest for sensitive data
• Tenant-isolated data environments preventing cross-tenant access
• Role-based access controls limiting data visibility to authorised team members
• Audit logging of data access and modification events
• Session security with HTTP-only, SameSite cookies and inactivity timeouts

Access tokens and API credentials used to connect with Meta services are stored encrypted and are scoped to individual Tenant accounts. Tokens can be revoked at any time by disconnecting the Meta integration from your TourOmni account settings. For Meta Login, users can also revoke TourOmni's access from their Facebook App Settings.

Data sharing

We do not sell Meta Platform data. Data received from Meta APIs is shared only with the following categories of service providers, solely to deliver platform functionality:

• Cloud infrastructure provider (AWS): for hosting, database management, and encrypted file storage.
• Meta itself: message data is transmitted back to Meta for delivery to the intended recipients via WhatsApp, Messenger, or Instagram, as directed by the Tenant.

Meta Platform data from messaging channels and login scopes is not sent to AI processing services. All third-party service providers are contractually bound to process data only as instructed and to maintain appropriate security standards. For a full list of third-party processors, please refer to our Privacy Policy.

Data retention and deletion

Meta Platform data is retained for the duration of your active TourOmni Subscription and integration connection. When you disconnect a Meta integration or close your account:

• API access tokens are immediately revoked and deleted
• Message data and conversation history stored in your Tenant environment are purged in accordance with our standard data retention policy
• Meta Login profile data associated with your user account is removed upon account deletion

You may also request deletion of your Meta Platform data at any time by contacting [email protected]. TourOmni will also process data deletion requests and callbacks received from Meta in accordance with Meta's platform requirements.

Your controls

You are in control of the Meta data TourOmni can access:

• Connect or disconnect: Tenant Admins can enable or disable WhatsApp, Facebook Messenger, and Instagram integrations at any time from TourOmni account settings.
• Revoke Meta Login: users who log in via Meta Login can revoke TourOmni's access at any time from their Facebook App Settings.
• Data export: you may request an export of your data held within TourOmni by emailing [email protected].

Data deletion requests

In compliance with Meta's platform requirements, TourOmni provides a data deletion mechanism for users who wish to have their data removed. If you have used Meta Login or any Meta-connected feature and wish to request deletion of your data, you may:

• Email [email protected] with the subject line "Meta Data Deletion Request" and include the email address associated with your account
• Remove TourOmni from your Facebook App Settings, which will trigger a data deletion callback that we will process

We will confirm deletion of your Meta Platform data within 30 days of receiving your request.

Related policies

This disclosure supplements and should be read together with the following:

• TourOmni Privacy Policy: full details on data collection, use, sharing, and your rights.
• TourOmni Terms of Service: terms governing use of the platform, including third-party integrations.
• Meta Platform Terms: Meta's terms for developers and applications that access Meta Platform data.
• Meta Developer Policies: Meta's policies governing the use of their developer platform and APIs.
• WhatsApp Business Solution Terms: additional terms governing use of the WhatsApp Business API.
• Meta Privacy Policy: how Meta itself collects and processes data.

Contact us

If you have any questions about TourOmni's use of Meta services or this disclosure, please contact: