Facebook App Review: Privacy Policy for app without UI - facebook

I know this is not a strictly code-related question but I wonder if anyone here could help.
As you know FB has updated his policy and app now must undergone a review process.
We were about to send our app for review for Public Content Access but now we are in a dilemma:our "server-to-server" app does not involve a UI and only aims to help our operations team with a small integration to our CRM: checking the presence of our customers (always other companies) in the platform.
The app will store only, if exists, the link to the FB public page of the company.
What kind of privacy policy we need? Do we need one?
Otherwise, are there any facebook contacts for developers looking for help?
Thank you for your time!

Related

Facebook periodic review is unclear

in order to approve your app’s continued operation on our platform.
Platforms affected: Connect URL.
Developer Policy 1.2: Build an app that is stable and easily navigable.Some common violations of this policy include:
- Broken Facebook integration (e.g. broken share, like or comment functionality)
- Broken user experience in the app (e.g. app has broken links or user interface failures)
My app:
Using https://www.npmjs.com/package/hellojs v1.18.8 to query user info from facebook.
The request URL:
https://graph.facebook.com/v2.9/me?fields=email,first_name,last_name,name,timezone,verified&access_token=.....
calling out hello.js
hello(auth.network).api('me').then(function (json) {
App has no share, like, comment functionality and not really any user interface. Just our page offers ability to fill some data with facebook and then it remembers you with cookie.
Anyone has similar e-mail and what to do?
Our app does not use share, like or comment functionality neither do we provide any user interface for users (only the o. We are using Facebook to prefill some user data on our site.
Have the same unclear message "Platform affected: Connect Url".
I asked for a more detailed answer and received an answer the next day:
Thank you for your response.
Facebook periodically reviews the websites and applications which are on it. Your application is in its review process currently. We are required to test the Facebook login functionality in order to conclude the review in totality. However, we are unable to do so.
Unfortunately, we have not been able to locate a Facebook integration (Login, Share and Like) on your submitted platform. To help us conclude the review process, could you kindly share the details regarding the location of a Facebook integration and how to navigate to it on your website URL.
This review is essential to Facebook as we want to offer the best experience to users as well as developers like yourself. Please help us in bringing your application into compliance by working with us.
Alternatively, you could aid us by sending us credentials of a test user which is already registered and connected to an FB account within the app. You can get all the information related to creating a test user here - https://developers.facebook.com/docs/apps/test-users.
Please feel free to get in touch with us regarding any doubts or queries you might have.
Thank you for your patience and cooperation.
Looking forward to hearing from you.
My app contains the functionality of a facebook login. I made an instruction and a test user of the application so that Facebook employees could test the functionality used in my application.
Normally they write down what is wrong and explain how to fix it. If you are not sure you can reply them back and ask how to fix it. I manage to fix my issue which was similar to the one explain below by emailing facebook.
https://technuisance.com/facebook/facebook-policy-warning-for-app-solved.html
I got the same message from Facebook two months ago. In my case, I didn't find a solution in time and Facebook penalize me by deactivating the app.
Therefore, you must attend to it if you do not want the same to happen to you. Facebook uses software similar to this to check for failures on your site and assigns a score according to its performance. That's why they send you such a generic message.
I suggest you use PageSpeed Insights to receive a report on the performance of your website. In addition, the platform gives you suggestions for optimization and improvement; Surely there you will find some clue of what may be failing.

Q: Facebook Business Manager - manage Pages (ads)

I'm having trouble finding solution for my client's new web app - within this app, customers will be able to create ads for facebook, instagram and google (and others in future), all from 1 place. So, somehow I need to be able to manage ads for customers' Pages. For personal accounts it's "quite simple", through ads manager, big green button 'Add people', but I need this permission for Pages, not for personal accounts.
We already have approved "ads_management", "ads_read" and "manage_pages" (I'm not 100% sure if we'll need manage_pages permission) - we'll probably ask for "Ads Management Standard Access" too.
After some research, I think this whole thing might be possible through Business Manager (so we'll need "business_management" permission too, right?), then in app settings, there's business manager ID input (for linking business account with app).
Here's my proposed solution (simplified):
in our web app, customers will provide us with url/ID of their Page
api call to check whether logged-in user is administrator of provided Page
api call to add this Page to Business manager (send invitation)
api call to check if user/Page has accepted invitation - if so, we'll be able to manage their ads
Question is, is this (very simplified) solution possible? Will it work? There are dozens of APIs and I'm not sure I picked the right one.
Development is at early stage, so we don't have any in-depth research yet.
Something very similar might be here - Facebook ads, add customer page to business manager but it's 2 years old and after all scandals, there were a lot of changes in APIs, so I'm not sure whether it's still actual.
Thanks in advance

New Facebook app requires App Review for Pages API

I am trying to set up a new Facebook App that is used to pull in the latest post from a public page into another website. I successfully did this a few months ago, but since the GDPR law has come into effect, Facebook's process of creating new apps has become much stricter, requiring them to go through App Review before allowing access to the Pages API product.
However to go through the App Review process, I need to provide step by step instructions and a screencast of the app in action. This isn't an app in the traditional sense, and how am I meant to show the app in action when I can't get it working without it being reviewed!?
The docs mention that "While testing and before submitting for review, your app may only access content that is available on a Page that you, as an app admin, developer, or tester, administer. If the app wants to access public content on other Pages, you must submit this feature for review" - does this mean that I do not to go through App Review if the Developer Account has access to administer the page in question?
To answer your question directly, if your app will only be loading data from pages that you admin, you don't need review/approval to use that API
That said, if you're making this app to fetch posts from someone else's page it will need approval, and if it's a simple background script i'm not sure how you can have it reviewed - the process is focussed on page management tools used by multiple users rather than once-off scripts

Facebook programmatically application creation

I'm facing the situation where I need to programmatically create multiple Facebook Messenger Apps to different chatbots. Pretty much something like ManyChat and ChatFuel. Can someone shed some light on how is it possible?
There's a thread on it from 2011 but I've been uncessful on finding documentation on these old Facebook API's.
Create a facebook application programmatically
Thanks!
There is no API for this. As ceejayoz mentioned, ManyChat and ChatFuel just run one app and use their customer's account with the rights manage_pages and subscribed_apps to subscribe the app to the customer's page.
That said, there is just one endpoint where all traffic is delivered to and the software has to route every message to this endpoint accordingly to the right page (using receiver_id in the payload).
Keep in mind that while you want to run several apps in parallel, you have to approve all of them. Without this approval, the app can not be reached from customers.
For more insight, see the FB docs:
https://developers.facebook.com/docs/facebook-login/access-tokens/?locale=en_US
And https://developers.facebook.com/docs/graph-api/reference/page/subscribed_apps

App Review on Facebook - Private Software that may scale up in the future

So we've developed a Facebook App (and similar apps on Twitter and Instagram) that allow users to post and read content using an external system. We'll sell this integration directly to our clients, so it's a private application.
Basically the user will see a very simple page with a button "Log in to Facebook" and a disclaimer regarding the authorization (we'll use some query params fixed in the url, depending on the client). The client authorize us and we capture the access tokens.
To submit the app review, though, we have to explicitly give a test user to the reviewers, but that's not really possible because the real "action" happens within the integrated systems, NOT within the app itself. And those systems are not public (they shouldn't be).
So just to be clear: our app is basically a very simple "Facebook login" that we use to get tokens, generated by specific clients authorization. It's not going to be published anywhere.
Until we have around 5 to 10 clients we can add the specific users in our app as Testers/Admins/etc, but what if we scale up? Say we have 20 clients. How are we supposed to get our app to be "live"?
To follow the app review steps we would have to create some users in our local systems (we have some dev environments), open them to the internet so the reviewers can log in and see how it actually works? Is that it?
(btw I'm asking this because our app review was rejected twice and I want to make sure I'm submitting everything they ask this time).
Thanks :)
I think the Login Review FAQ answers most of your questions. The key point:
Our review team will actually test how your app uses each permission on every platform you have listed in the settings section of your app.... You'll need to explain exactly how to test each permission or feature in your app so that we can make sure it works and follows our policies. We can't approve your app if we can't fully test how it integrates with Facebook.
In other words, it's not enough to just allow them to log in to your app, you have to expose all Facebook-related features to the reviewer.
To follow the app review steps we would have to create some users in our local systems (we have some dev environments), open them to the internet so the reviewers can log in and see how it actually works? Is that it?
Yes, though I'm not sure what you mean by "open them to the internet". You should be able to create a test user on your local system and link that account to a test Facebook user. Then you can have the Facebook reviewer use that test account for their review. (From the FAQ: "In the Items in Review section, you'll see a Test User (optional) section that allows you to type the name of the user you wish to be used in your review.")