Trust
Security and Meta permissions
CommentCrow reads the comments under your Meta ads, hides the ones that match your spam rules, and posts replies you've approved or automated. This page lists exactly what access that needs and what we do with it.
Meta permissions we request
| Permission | Why | What it can't do |
|---|---|---|
pages_read_engagement | Read comments on posts and ads from your Pages | Read your inbox, messages or private data |
pages_manage_engagement | Hide comments and post replies as your Page | Delete comments, edit posts, change Page settings |
ads_read | Match comments to the ad they sit under, so you get per-ad thread health | Create, edit, pause or pay for ads |
We never ask for ads_management, billing or admin permissions. You can revoke access at any time from Meta Business Settings → Integrations → Connected apps, and everything stops immediately.
Hiding, not deleting
A hidden comment stays visible to the person who wrote it and their friends, and invisible to everyone else. Nothing is deleted. If we get it wrong, you unhide it with one click and the classifier learns from it.
What we store
- Comment text and author name for as long as needed to classify, act and show it in your dashboard, then 90 days for review, then deleted.
- Your rules, voice settings and FAQ answers.
- Meta access token, encrypted at rest, used only for the calls above.
- Aggregate stats per ad (hidden, answered, open, response time).
We do not store your ad creative, spend, audiences or customer purchase data.
Where data lives
EU data centres. Processing is covered by GDPR and UK GDPR. We act as a processor on your behalf; you remain the controller of your Page data. A data processing agreement is available on request.
Automated replies
Replies are generated from your FAQ answers and tone settings. You choose per account whether replies are sent automatically or held for one-tap approval. Anything the system isn't confident about, and every complaint, is escalated to you instead of answered.
Reporting a problem
Use our contact form. Security issues are acknowledged within one working day.