Messenger Privacy

Original document

Attention points

23 TO CHECK

Pointers to disclosures this policy may not clearly make, checked against major privacy laws. This is a heuristic — not legal advice, and not a finding that anything is missing or unlawful.

GDPR / UK-GDPR

0/13 ADDRESSED
  • Who controls your data (identity & contact of the data controller)GDPR Art. 13(1)(a)
  • Data Protection Officer contactGDPR Art. 13(1)(b)
  • The legal basis for using your dataGDPR Art. 13(1)(c)
  • Legitimate interests relied on (where that is the basis)GDPR Art. 13(1)(d)
  • Who your data is shared with (recipients)GDPR Art. 13(1)(e)
  • International transfers and their safeguardsGDPR Art. 13(1)(f) / 46
  • How long your data is kept (retention)GDPR Art. 13(2)(a)
  • Your data-subject rights (access, erasure, portability, object, …)GDPR Arts. 13(2)(b), 15–21
  • The right to withdraw consent (where consent is the basis)GDPR Art. 13(2)(c)
  • The right to complain to a supervisory authority (e.g. the ICO)GDPR Art. 13(2)(d)
  • Whether providing your data is required, and what happens if you don'tGDPR Art. 13(2)(e)
  • Automated decision-making or profilingGDPR Arts. 13(2)(f), 22
  • Where your data was obtained, if not collected from you (source)GDPR Art. 14(2)(f)

CCPA / CPRA

0/10 ADDRESSED
  • Notice at collection: what categories of data are collected, and whyCCPA §1798.100(b)
  • The categories of sources the data comes fromCCPA §1798.110(c)
  • The business or commercial purposes for collecting/selling/sharingCCPA §1798.110(c)
  • Categories of third parties data is shared/sold toCCPA §1798.115
  • A 'Do Not Sell or Share My Personal Information' option (if it sells/shares)CCPA §1798.135(a)
  • A 'Limit the Use of My Sensitive Personal Information' option (CPRA)CPRA §1798.135(a)
  • Your CCPA rights (know, delete, correct, opt-out, limit, non-discrimination)CCPA §§1798.100–125
  • A non-discrimination promise for exercising your rightsCCPA §1798.125
  • Retention period (or criteria) per category of data (CPRA)CPRA §1798.100(a)(3)
  • At least two ways to submit a request, plus a contactCCPA §1798.130

Current text

Your personal messages are private

We want you to know how we use your information. We collect information from Messenger so that we can improve the product experience and keep people safe and secure. We don't use the content of your personal messages for ads personalization. Some types of messages that aren't personal include messages to and from business accounts, messages exchanged with Meta when using products like Meta AI, and messages in features designed to be more public, like channels.

Meta also adds an additional layer of privacy by securing personal messages and calls on Messenger with end-to-end encryption, which means nobody, including Meta, can see or listen to what's sent or said in your calls or messages. Keep in mind, for reporting and optional features, you or someone in the chat may still choose to share messages with Meta.

Learn more