Platform permissions and data use
Last updated: October 3, 2026
Ozvelo connects to the accounts a business owns so the business can publish posts and answer customer messages from one place. This page lists, for every platform, which permission we request and what it is used for. We request nothing that a feature does not need, and we update this page before we ask for any new permission.
How it works
- A business owner signs in to their own dashboard and presses “Connect” for a platform.
- The platform's own consent screen opens. The owner chooses which Page, profile or location to connect and allows access. We never see or store a password.
- The owner writes or approves a post, or turns on automatic replies. We publish or reply only through the account the owner connected.
- The owner can disconnect at any time. The access token is deleted immediately.
Permissions we request
| Platform | Permission | What it is used for |
|---|---|---|
| Facebook Pages | pages_show_list, pages_read_engagement | To list the Pages the owner manages so they can choose one, and to show basic statistics (followers, likes, comments) of that Page. |
| Facebook Pages | pages_manage_posts | To publish the posts and photos the owner writes or approves, at the time the owner selects, on the Page they connected. |
| Messenger | pages_messaging | To receive messages sent to the connected Page and send the owner's (or the AI assistant's) reply in the same conversation. |
instagram_basic | To identify the connected Instagram professional account and show its name and basic statistics. | |
instagram_content_publish | To publish the photos, carousels and stories the owner writes or approves to the connected Instagram professional account. | |
instagram_manage_messages | To receive direct messages sent to the connected account and send replies in the same conversation. | |
| WhatsApp Business | whatsapp_business_messaging (business-provided token) | To receive messages sent to the business's WhatsApp number and reply within the customer service window. The owner provides their own access token. |
openid, profile, w_member_social | To identify the member who connects and publish posts that member writes or approves to their profile. | |
| LinkedIn Pages | r_organization_admin, w_organization_social | To list the Company Pages the member administers and publish posts the member writes or approves to the Page they choose. |
| TikTok | user.info.basic, video.publish | To show the name and picture of the TikTok account that was connected, and to publish the photos and videos the member prepares and confirms (with the privacy, comment and commercial-content choices the member makes for each post). |
| Google Business Profile | business.manage | To list the owner's business locations and publish posts (updates and offers) to the locations the owner selects. |
| Telegram, Bluesky, Mastodon, WordPress | Bot token / app password provided by the business | To receive messages or publish posts on the one account the business connected. These credentials are created by the owner and can be revoked by the owner at any time. |
What we never do
- We do not sell data or use it for advertising.
- We do not read, post or message anywhere except the accounts a business connected, and only for the features described above.
- We do not use data from one business to serve another business.
- We do not store passwords of social accounts.
- Data received from Google APIs is used only to provide the user-facing features above and is not transferred to other tools for AI model training or any other purpose, in line with the Google API Services User Data Policy, including the Limited Use requirements.
Disconnecting and deleting data
You can disconnect an account in the dashboard (Channels page) or revoke access in the platform's own settings. See the data deletion page for details. /data-deletion
Questions about permissions: info@ozvelo.com