On October 30, Meta’s updated Commercial Terms take effect, and the clause that matters to small-business owners isn’t buried in a footnote. It authorizes “web scrapers, bots, robots, spiders, crawlers, and user agents” to access any website “associated with” a Facebook, Instagram, or WhatsApp business account, and to use what they find to “train” Meta’s products. Nieman Lab first reported the change on October 15. The prior terms, dated March 6, 2024, contained no such paragraph.
The structural shift is the quiet part. Under the old framing, the crawling bargain was tied to buying ads. Under the new one, as Search Engine Journal documented, the permission extends to any business use of Meta’s surfaces: managing a Facebook Page, sending marketing messages, maintaining a product catalogue, or signing in to Meta Business Suite. Relevant Audience, reading Meta’s own preview page, notes that acceptance is passive. Continued use after October 30 counts as agreement. There’s no partial opt-out.
Meta’s framing is narrower. Spokesperson Andy Stone wrote on X on October 16 that the update is “not about scraping news sites” and is instead designed to pull accurate product information for on-platform ad and content recommendations. A separate Meta spokesperson told Nieman Lab that “content owners can still manage how their content is accessed by using robots.txt.” The terms themselves don’t mention robots.txt.
The three legal experts Nieman Lab asked to read the clause landed elsewhere. Cornell law professor James Grimmelmann said it “clearly represents permission to Meta to train AI on any content from” publishers’ sites, and flagged that the “test credentials” language would technically let Meta “sign up as a fake user” to pass registration walls. Matt Topic, an attorney at Loevy & Loevy, was blunter: “publishers should assume that it would be enforceable.”
For a founder running Meta ads, the practical read is simple. Website copy, product pages, offers, and brand voice become raw material for the same recommendation system that ranks competitors’ ads. A separate new AI features clause makes the business “solely responsible” for AI-generated ad content it approves, shifting liability downstream even as training rights move upstream. The surfaces this content eventually feeds, including Meta’s Muse and Wonder answer layers, are where small businesses are increasingly discovered.
Three concrete steps for the next 13 days: audit which domains are linked to Meta business accounts; add a robots.txt block for meta-externalagent (the AI-training crawler) and, if desired, meta-webindexer; and read the AI features clause before approving any Meta-generated ad creative. The deadline doesn’t move. The default does.
Sources
- https://www.niemanlab.org/2026/10/metas-new-commercial-terms-will-allow-the-scraping-of-news-sites-legal-experts-say/
- https://arstechnica.com/tech-policy/2026/10/meta-may-use-sweeping-new-commercial-tos-to-avoid-millions-in-ai-licensing-fees/
- https://www.searchenginejournal.com/metas-new-terms-expand-crawling-rights-beyond-advertisers/593217/
- https://ppc.land/meta-grants-itself-the-right-to-crawl-advertisers-websites-for-ai/
- https://www.relevantaudience.com/meta/meta-commercial-terms-crawling-ai-training-october-30-2026/