Privacy Policy

1. Introduction

Local Growth Labs LLC ("we," "our," or "us") operates the MMAPI Chat platform ("the Platform"), a Messenger marketing and automation tool that enables businesses to manage conversations, send marketing messages, and engage with customers on Facebook Messenger. This Privacy Policy describes how we collect, use, store, and protect information when you use our Platform, including data received from Facebook and Messenger.

2. Information We Collect

When you connect your Facebook Page and Ad Account to our Platform, we collect and process the following information:

• Facebook Page Data: Page name, Page ID, profile picture, and Page access tokens required to send and receive messages on your behalf.
• Messenger Conversation Data: Messages sent to and received from your Page, including message content, timestamps, sender profile information (name, profile picture, locale, timezone, gender where permitted), and message delivery/read status.
• Ad Account Data: Ad account IDs, campaign information, spend metrics, and delivery statistics related to Marketing Messages campaigns created through our Platform.
• Subscriber Data: Facebook-scoped user IDs (PSIDs), opt-in status, opt-in timestamps, and engagement history for users who interact with your Page via Messenger.
• Account Information: Your name, email address, and login credentials when you create an account on our Platform.

3. How We Use Your Information

• To send and receive Messenger messages on behalf of your connected Facebook Page.
• To execute automation flows, keyword triggers, and scheduled sequences that you configure.
• To manage and deliver paid Marketing Messages campaigns through the Facebook Marketing Messages API.
• To display conversation history in our Live Chat inbox so you can manage customer inquiries.
• To provide analytics and reporting on message delivery, engagement rates, and campaign performance.
• To maintain and improve the functionality, security, and reliability of our Platform.

4. Facebook Permissions We Request

When you connect your Facebook Page and Ad Account to MMAPI Chat, we request the following Facebook permissions. Each permission is used only for the purpose described:

• pages_messaging — Send and receive Messenger conversations on behalf of your Page so you can run live chat, automation flows, and broadcasts.
• pages_show_list — Display the list of Pages you administer so you can choose which Page to connect.
• pages_manage_metadata — Subscribe your Page to webhooks for incoming messages, postbacks, opt-ins, and delivery events.
• pages_read_engagement — Read Page-level data such as conversations, comments, and messaging insights to power Inbox and Analytics.
• pages_user_locale — Personalize automation flows and broadcasts based on the subscriber's language preference.
• pages_user_timezone — Schedule sends within the subscriber's local working hours and respect quiet hours.
• pages_user_gender — Optionally personalize automated messages and segment audiences when configured by the operator.
• business_management — Read your Business Manager assets so you can select the correct Page and Ad Account during onboarding.
• ads_read — Read campaign delivery and spend metrics so we can display Marketing Messages performance and cost.
• ads_management — Create and manage Marketing Message Campaigns on your Ad Account through the Facebook Marketing Messages API.
• pages_utility_messaging — Send transactional utility messages (account updates, confirmations) outside the standard messaging window.
• marketing_messages_messenger — Send opt-in-based recurring marketing messages via the Messenger Marketing Messages product.
• paid_marketing_messages — Send paid Marketing Messages via the Messenger Marketing Messages API for users who opted in to recurring notifications.
• public_profile — Identify the operator signing in and display their name and profile picture in the Platform UI.

Our use of information received from Facebook APIs adheres to the Meta Platform Terms and Developer Policies. We do not sell, license, or share Facebook user data with third parties for their own purposes, and we do not use Facebook data for any purpose unrelated to providing and improving our Platform services.

5. Data Sharing

We do not sell your data. We may share information only with trusted service providers for hosting and infrastructure, when required by law, or in the event of a business transfer.

6. Data Retention

We retain Facebook Page data, Messenger conversation data, subscriber records, and ad account metrics for as long as your account remains active and the Page is connected. If you disconnect your Facebook Page, delete your account, or revoke the app via Facebook Settings → Business Integrations, all associated Page data, conversations, subscriber tokens, and personally identifiable information are deleted within 30 days. Aggregate analytics that contain no personal identifiers may be retained longer for service-improvement purposes. Backups containing your data are purged within 90 days.

7. Data Security

We implement industry-standard security measures including encryption of data in transit (TLS/SSL), AES-256-GCM encryption at rest for Page access tokens, the Facebook user access token, and Messenger notification message tokens, secure secret management, regular security reviews, and role-based access controls.

8. Your Rights and Data Deletion

You have the right to access, correct, delete, or export your data. The fastest way to delete your data is to remove MMAPI Chat from Facebook Settings → Business Integrations; Facebook will notify our data-deletion callback and we will delete all associated Page, conversation, and subscriber data within 30 days. You can check the status of any deletion request on our Data Deletion Status page using the confirmation code Facebook returns. You can also email tyler@localgrowthlabs.com from the address associated with your account to request deletion or export.

9. Cookies

Our Platform uses essential cookies to maintain your login session. We do not use third-party advertising cookies.

10. Children's Privacy

Our Platform is not directed at children under 13. We do not knowingly collect personal information from children.

11. Changes

We may update this policy from time to time. Continued use after changes constitutes acceptance.

12. Contact Us

Last Updated: April 1, 2026