New Meta commercial terms let Meta crawl your business website

If your business has a Facebook Page, an Instagram business profile or a WhatsApp Business number, you are about to agree to something new. The updated Meta commercial terms, which take effect on October 30, 2026, give Meta permission to send automated crawlers to the websites connected to your business account. There is no opt-out switch: the terms say that a business that disagrees has to stop using Meta's products for commercial purposes.

Most of the early coverage focused on news publishers, who were the first to raise the alarm. But the terms apply to every business account, including a local shop that only manages a Facebook Page and never buys an ad. That makes this a small-business story too.

What the Meta commercial terms actually say

Meta has published a preview of the updated Commercial Terms that replaces the current version on October 30. The relevant clause sits in the section on the licenses and rights a business gives Meta. In plain terms, it lets Meta, or anyone acting for Meta, use scrapers, bots and crawlers to access, index, cache, analyze and collect content from the domains and pages associated with your business, and to come back periodically for updates.

Three details stand out:

• Who it covers. According to Net Influencer, business use includes managing a Page, running ads, sending marketing messages and using Meta Business Suite or Ads Manager. Search Engine Journal notes this includes businesses that manage a Page without ever paying for ads.
• Test credentials. The terms let Meta create test credentials to reach the pages it crawls. Legal experts quoted in the coverage read that as a way past simple registration walls.
• No clean opt-out. As TechRound put it, staying active is what grants permission.

Meta already walked back one word

The first version of the preview said Meta could use what it collected to provide, develop, improve, research, train and maintain its products, and it named Meta's AI among those products. After publishers and press groups objected, Meta revised the clause. Search Engine Journal compared the two versions: "train" is gone, and the stated purpose now covers advertising and business products, plus the integrity and security of Meta's services.

Meta's position is that this is a consolidation of crawling language that already lived in other terms. A Meta spokesperson told The Verge, as reported by Search Engine Journal, "This is not about scraping news sites." Meta has also said the terms do not override a site's robots.txt preferences.

Critics are not satisfied. Engadget reports that legal experts still see the revised wording as a substantial expansion of Meta's scraping permissions. Search Engine Journal points out that the new language does not mention robots.txt at all, and that the UK English version of Meta's self-serve ad terms still showed the older wording as of October 19.

If you run a Facebook Page, you are about to make a decision about your website whether you mean to or not.

Why small businesses should care

You are probably not worried about Meta reading your hours page. With the Meta commercial terms, the real issues are control and clarity:

1. The scope is vague. Experts quoted by TechRound say the phrase describing which sites are covered could reach your main domain, product catalog, sales pages and the landing pages your ads point to. Nobody outside Meta can yet say where it stops.
2. Robots.txt is a request, not a lock. Following it is voluntary and it does not create an enforceable legal right, a point Search Engine Journal and Engadget both make.
3. Your content is your asset. Original photos, menus, pricing guides and how-to articles took real time to make. You should decide on purpose which companies can collect them.

None of this means you should quit Facebook or Instagram. For most local businesses those channels still drive real customers, and walking away would cost more than it saves. The smarter move is to understand which doors are open and close the ones you don't want open.

Your robots.txt now does more work

Meta's own web crawler documentation lists five Meta crawlers, each with a different job:

• FacebookExternalHit builds the link previews (title, description, image) when someone shares your page on Facebook, Instagram or Messenger.
• Meta-ExternalAds crawls for advertising and other business products, which is the use the revised terms describe.
• Meta-ExternalAgent crawls to train foundation AI models or improve products by indexing content.
• Meta-WebIndexer helps Meta AI search cite and link to your content.
• Meta-ExternalFetcher fetches pages a user asks for, and Meta says it may ignore robots.txt because the request comes from a person.

Because the crawlers are separate, a site can, for example, block the training crawler while still allowing link previews and Meta AI citations. Search Engine Journal notes it is unclear whether those robots.txt choices limit what a business grants by accepting the terms, so treat them as a strong signal of your preferences rather than a guarantee.

OnlyaClick tip: Before you change anything, open yoursite.com/robots.txt and save a copy. Then make one decision per crawler instead of blocking "Meta" as a whole. Blocking FacebookExternalHit is the most common mistake: it breaks the preview cards on every post that links to your site, so your Facebook and Instagram shares suddenly look broken.

What to do before October 30

You have a little over a week. Here is a practical checklist:

• Read the clause yourself. Meta has changed the preview once already, so check it again close to the effective date. If your business handles sensitive client information, check with a lawyer about what the terms mean for you.
• List what is "associated" with your account. Note every domain and landing page your Page, profile and ads link to, including booking tools, menus and online stores.
• Review your robots.txt by crawler. Decide which of Meta's five crawlers you are comfortable with and write rules for each one.
• Check what sits behind a sign-up. If members-only or customer-only content is protected only by a free registration, assume an automated account could reach it and move truly private material behind real authentication.
• Keep posting. Your social media marketing plan doesn't need to change. This is a website housekeeping task, not a reason to go quiet on Facebook or Instagram.

If you are not sure how your site handles crawlers, a technical SEO audit will show you what your robots.txt allows, which bots visit and which pages are exposed.

The bottom line

The updated Meta commercial terms take effect October 30 for every Meta business account on Facebook, Instagram and WhatsApp, and keeping your account active is how you accept them. Meta removed the word "train" after a backlash, but kept broad crawling rights and the ability to create test credentials. You don't need to leave Meta. You do need to know which of its crawlers can reach your site, and to set those rules on purpose this week.