“Oh, and make sure all your stuff is legal so we don’t get in trouble when we take it.”
Meta being Meta. No surprise there.
News are posted elsewhere.
You authorize us […] to […] create test credentials to […] crawl the domains […] associated with your products or services.
Meta may use any content […] to […] train […] Meta Company Products.
Basically, in exchange for being allowed to continue posting content on Facebook, you’re giving them permission from now on to aggressively scrape your own sites for content to train their models.
To quote a famous Sith Lord: “I am altering the deal. Pray I do not alter it further.”
No way this goes through in the EU. Frankly this should be against the law in any country. It’s one thing to say “Whatever you do on our platform belongs to us”, but it’s a whole other thing to do this.
And then they’re going to whine about the EU waging war against the US again.
Please let me out of this universe, I’ll try a parallel one.
Yes, I think the TOS says this only applies in the US.
Meta says it can steal any of your business ideas, business processes, and business technologies for its own use and not pay you.
Amazon does this by reserving the right to sublicense any/all products listed on their 3rd party marketplace. Even if it’s the manufacturer selling d2c on Amazon.
Not ever remotely surprising
I mean, this is fine. The “content” most businesses publish where meta can see it is all sanitized advertising nonsense anyway. This will create for meta the least useful ad generator; assuming that such a thing could actually be useful.
To be clear, this is not restricted to content posted on Facebook. It’s any content posted on any website owned by the customer.
And specifically gives Meta the right to create “test credentials” on sites and scrape resultant deep content such as product docs that are only available with an account. This is far more invasive and concerning than traditional site scraping and indexing.(refs: https://www.theregister.com/ai-and-ml/2026/10/16/meta-grants-itself-right-to-scrape-content-from-business-customers-for-model-training/5303658 , https://m.facebook.com/legal/commercial_terms_preview )
“test credentials” just reads to me as them giving themselves permission to straight up pen test every business with a social media account.
Very tempting to take a list of IP address ranges such as https://networksdb.io/ip-addresses-of/meta-platforms-inc and add them to our WAF blocklist, since I assume they won’t be honest about their user agent string when scraping.
Except there’s no guarantee they’ll be coming from one of their own IP addresses. There’s nothing to stop them from using a residential botnet.
All too true, unfortunately. No honor among thieves!
Not aware of Meta being used for work.
Its been a thing for… Quite a long time now. At least 10 years.
One of the first big intrusions I remember was “check in here on Facebook for WiFi access!”.
Horrifying even then.
Plenty of companies have social media accounts for advertising and support.
Grants itself rights. Sounds so much like… every government.
