Skip to main content

Digital MarketingMeta & Your Website

Meta's New Business Terms Take Effect November 20: What Small Businesses Should Check First

Meta's updated terms let it crawl websites linked to your business and make you responsible for the ads its AI helps create. Here's what they say, what they don't, and what to check before November 20.

Written by
The Social Stellor Studio · Creative Team
Published
Reading time
15 min

Last verified October 27, 2026 against Meta's own terms and crawler pages. Not legal advice. Sources are listed at the end.

If your business has a Facebook Page, an Instagram business account or a Meta ad account, Meta has told you its terms are changing. The updated Commercial Terms and Self-serve Ad Terms now take effect on November 20, 2026, three weeks later than first announced. Like most terms updates, they apply automatically: keep using Meta for business after that date and you've accepted them.

Most of the coverage has focused on one clause, the one that lets Meta crawl websites connected to your business. Publishers have reason to care about that clause. A small business needs to look at three things: what Meta's crawlers can reach on your site, who is responsible when Meta's AI helps write your ads, and how disputes with Meta get resolved. This guide covers all three.

Key Takeaways
  • Meta's own pages give the effective date as November 20, 2026, though the preview pages still carry an October 30 footer. Plan for November 20.
  • If you advertise, Meta's current ad terms already let it crawl your site. The update changes how, and drops "training" from the stated purposes. If you only run a Page, a crawling clause is new for you.
  • Robots.txt gives you real control over most of Meta's documented crawlers, but it isn't mentioned in the terms, and Meta says two of its crawlers may bypass it.
  • You are "solely responsible" for AI-assisted ad creative, even when Meta's tools generated it. Review before you publish.

This is a plain-English reading of public documents, written for business owners. It isn't legal advice. If you have legal questions about these terms, especially the arbitration section, speak to a lawyer.

What Changes on November 20, in Short

Meta is updating two documents. The Commercial Terms (opens in new tab) cover anyone using Meta's products "for a business or commercial purpose". The Self-serve Ad Terms (opens in new tab) cover anyone buying ads through Meta's self-serve tools, such as Ads Manager. If you advertise, both apply to you.

Across the two updated documents, three changes matter most to a small business:

ChangeMeta may crawl websites "associated with your products or services", using automated software and test credentials
Where it appears
Both documents
Who it affects
Any business using Meta commercially. For advertisers, it replaces an existing crawl right
ChangeYou carry the risk of AI-generated or AI-assisted content, including ad creative
Where it appears
Both documents
Who it affects
Anyone using Meta's AI features, such as Advantage+ creative or generated text and images
ChangeDisputes go to individual arbitration, with a 30-day opt-out
Where it appears
Commercial Terms
Who it affects
U.S. businesses; the current version already has a similar clause

Why you may have read "October 30"

Meta first set October 30, 2026 as the effective date. On October 23, PPC Land reported that Meta had pushed both documents back to November 20. It quoted a Meta statement, given to Reuters, that the delay was "to allow more time for us to explain to our partners and stakeholders what's changing and what's not." (PPC Land (opens in new tab), October 23, 2026.)

On October 27, Meta's pages still disagreed with each other. The banner on both current pages, and on both previews, reads that the updates "will come into effect on 20 November 2026." But the footer of each preview still says "Effective date: 30 October 2026." We read the banner as the current position, because it matches Meta's public statement. Plan for November 20, and check the live pages again before then, since the date has already moved once.

Does This Apply to My Business?

The updated Commercial Terms say they apply to "access or use of the Meta Company Products (or 'Products'), for a business or commercial purpose", except where Meta says separate terms apply. Acceptance is automatic: "By continuing any access or use of any Meta Company Products for business or commercial purposes after any notice of an update to these Commercial Terms, you agree to be bound by them."

Search Engine Journal reported that this reaches beyond advertisers to businesses that only manage a Facebook Page (SEJ (opens in new tab), October 16, 2026). In our reading, the same "business or commercial purpose" wording is broad enough to cover an Instagram business account as well. Meta's terms don't list each product by name, though, and some Meta products have their own separate terms. Treat that part as interpretation, not a settled fact.

You run Meta ads

Both documents

Your current ad terms already include a crawl right; the update replaces it. Read the AI-creative section closely.

Page or Instagram only, no ads

Commercial Terms

A crawling clause is new for you. Your main decision is about Meta's AI crawlers.

Members-only or paid content

Check access

The clause mentions test credentials, so make sure gated pages sit behind a real login. Robots.txt isn't access control.

You use Meta personally only

Not affected

These are business terms. Personal use falls under Meta's separate consumer terms.

Change 1: Meta Can Crawl Websites Linked to Your Business

What the clause says

The same paragraph appears in both updated documents. In the Commercial Terms preview (opens in new tab) it reads, in full:

“You authorise us (or any entity acting on our behalf) to use automated software (such as web scrapers, bots, robots, spiders, crawlers and user agents) and create test credentials to access, index, cache, analyse, collect, retrieve or crawl the domains, web pages or URLs (and any content available through them) that are associated with your products or services, or that are made available through your or users' use of Meta Company Products and services, and to periodically pull updates from such domains, web pages or URLs in order to provide, develop, improve, research and maintain advertising and business products (including business, commercial and related products to help you create and deliver ads and other commercial content, provide users information about your products and services, and connect you with users who may be interested in your products and services) and maintain the integrity and security of Meta Company Products.”

Meta Commercial Terms (updated version), as published on October 27, 2026

What's actually new, if you already advertise

Much of the coverage has treated this as a brand-new crawl right. For advertisers it isn't. The current Self-serve Ad Terms (opens in new tab), effective August 22, 2025, already say: "By placing an Order, you grant us the right to access, index, cache, analyse or crawl the content available through your domains, web pages or URLs, or any portion thereof, for developing and improving advertising and other business-related products and related uses, research and training, and maintaining the integrity of the Meta Company Products."

Triggered by
Current ad terms (Aug 22, 2025)
Placing an ad order
Updated terms (from Nov 20, 2026)
Any business use of Meta's products
What can be reached
Current ad terms (Aug 22, 2025)
Your domains, web pages or URLs
Updated terms (from Nov 20, 2026)
Domains, pages or URLs associated with your products or services, or shared through your or users' use of Meta
How
Current ad terms (Aug 22, 2025)
Not specified
Updated terms (from Nov 20, 2026)
Automated software, test credentials, and periodically pulling updates
Stated purposes
Current ad terms (Aug 22, 2025)
Advertising and business products, "research and training", integrity
Updated terms (from Nov 20, 2026)
Advertising and business products ("provide, develop, improve, research and maintain"), integrity and security

So for an advertiser, the update cuts both ways. The word "training" is gone from the stated purposes. The scope gets wider, though: the clause now names automated tools and test credentials, covers URLs that reach Meta through other users' activity, and allows ongoing updates rather than one-off visits. For a business that only runs a Page, all of it is new.

What the clause doesn't establish

  • It doesn't mention robots.txt. Meta has said publicly that site owners can still use robots.txt (more on that below), but the terms themselves neither promise to honor it nor override it.
  • It doesn't name which of Meta's crawlers will do the crawling.
  • It doesn't define "associated with your products or services". How far that reaches beyond your own website isn't spelled out.
  • It doesn't say AI training is permitted. "Training" was removed. The text doesn't say whether "develop" and "research" cover any AI model work, so don't assume either way.
  • It doesn't explain how test credentials would be used. SEJ reported that Meta declined to say whether they could get past paywalls.

What Meta says, as reported

Meta's statements about the clause have come through journalists, not the terms. According to Search Engine Journal (opens in new tab), Meta spokesperson Andy Stone said the update helps Meta pull accurate product information for ads and content recommendations, and is "not about scraping news sites." Meta also told reporters that site owners can still use robots.txt to signal their preferences. These are Meta's explanations, given to the press. Only the terms themselves form part of your contract with Meta.

Meta's Five Crawlers, and What Each One Does

Meta publishes a list of its web crawlers (opens in new tab). Each one identifies itself with its own user-agent name, and that name is what robots.txt rules target. Here's what Meta says each does, as of October 27, 2026:

Crawler (user agent)facebookexternalhit
What Meta says it does
Reads pages shared on Facebook, Instagram or Messenger to build the link preview (title, description, thumbnail)
Robots.txt, per Meta's documentation
Follows it in general, but "might bypass robots.txt when performing security or integrity checks"
Crawler (user agent)meta-externalads
What Meta says it does
Crawls "for use cases such as improving advertising" and other business-related products
Robots.txt, per Meta's documentation
Meta's own robots.txt example includes it
Crawler (user agent)meta-externalagent
What Meta says it does
Crawls "for use cases such as training foundation AI models" and improving products by indexing content directly
Robots.txt, per Meta's documentation
Meta's own robots.txt example includes it
Crawler (user agent)meta-webindexer
What Meta says it does
Improves Meta AI search results. Meta says allowing it helps it "cite and link to your content in Meta AI's responses"
Robots.txt, per Meta's documentation
Meta's page names no exception for it
Crawler (user agent)meta-externalfetcher
What Meta says it does
Fetches a specific link when a user asks, for example for AI agent features
Robots.txt, per Meta's documentation
"May bypass robots.txt because it performs fetches that were requested by the user"

Two details from that page are worth knowing. Meta says to "allow up to 24 hours for changes to robots.txt to take effect." And it says that allowing its crawlers by IP address is more secure than relying on user-agent names, since anyone can claim a user-agent name.

Should You Block Meta's Crawlers? A Decision Guide

There's no single right answer, and blocking everything has costs. Here's what allowing or restricting each crawler means in practice:

Crawlerfacebookexternalhit
If you allow it
Links to your site show proper previews when shared
If you restrict it
Shared links may show no image or description. Most businesses should leave this alone
Crawlermeta-externalads
If you allow it
Meta can read your pages for its ad and business products
If you restrict it
Meta hasn't published what this changes for ad delivery. We'd avoid it on pages you advertise until it does
Crawlermeta-externalagent
If you allow it
Your content is available for uses Meta documents as including AI model training
If you restrict it
Meta's own robots.txt example covers it. Meta's descriptions don't tie it to link previews or ads
Crawlermeta-webindexer
If you allow it
Meta AI can cite and link to your pages in its answers
If you restrict it
Less chance of being cited in Meta AI responses
Crawlermeta-externalfetcher
If you allow it
Users can ask Meta's AI to read or act on your pages
If you restrict it
Robots.txt may not stop it. Meta says it may bypass robots.txt for user-requested fetches
Question 1

Is every private page (client portals, paid lessons, documents) behind a real login? If you have none, answer yes.

No →Fix that first. Robots.txt is a request, not a lock.
Yes →Continue to the next question.
Question 2

Are you comfortable with your public pages being available for AI model training?

No →Disallow meta-externalagent, then continue.
Yes →Continue to the next question.
Question 3

Do you want Meta AI to be able to cite your pages in its answers?

No →Consider disallowing meta-webindexer as well.
Yes →Keep meta-webindexer allowed. Leave facebookexternalhit open and, if you advertise, meta-externalads too.

If you run Meta ads to your own website or store

Keep facebookexternalhit and meta-externalads allowed on the pages you advertise. Meta's explanation for the crawl clause, as reported by SEJ, is pulling accurate product information for ads. Blocking the ads crawler while paying for ads that point to those same pages is a contradiction we'd avoid until Meta says what it changes. The AI-training question (meta-externalagent) is a separate decision and doesn't need to follow your ad strategy.

If you have a Page or Instagram account but don't advertise

The live decisions are meta-externalagent and meta-webindexer. A hypothetical example: a Portland bakery that posts on Instagram and has a simple five-page website may have no objection to its menu and opening hours appearing in Meta AI answers. That's a reason to keep meta-webindexer allowed. It might still choose to opt out of AI training by disallowing meta-externalagent. The two choices are independent.

If you have members-only, paid or client content

This is where the update deserves most attention, because the clause mentions test credentials. Robots.txt is a public file that asks crawlers to stay away; it doesn't stop anything that ignores it. Anything genuinely private should sit behind real authentication: logins, expiring links, or permissions on your hosting or course platform. If a page is reachable by anyone with the URL, assume it can be read. A web development partner can audit this quickly.

How to write the rules

Robots.txt rules are grouped by user agent. Each group starts with a "User-agent:" line naming the crawler, followed by "Disallow:" lines for the paths it should skip. "Disallow: /" means the whole site. Google's introduction to robots.txt (opens in new tab) explains the format. Common setups:

GoalOpt out of Meta's AI-training crawler only
Rules to add to robots.txt
Two lines: "User-agent: meta-externalagent", then "Disallow: /" on the next line
GoalKeep a private folder away from Meta's ad and AI crawlers
Rules to add to robots.txt
"User-agent: meta-externalagent", then "Disallow: /members/". Repeat both lines with meta-externalads in place of meta-externalagent
GoalLeave everything open (the default)
Rules to add to robots.txt
No Meta-specific rules needed

Check how your website platform manages robots.txt before you edit it. On Shopify, Wix, Squarespace and many WordPress setups, the file is generated for you, and changes go through the platform's settings or a template rather than a plain text file. A broken robots.txt can stop Google crawling your site as well.

Check your logs before you decide

Before changing anything, find out whether Meta's crawlers visit your site at all. Most hosts and CDNs, Cloudflare included, let you filter visitor logs by user agent. Search for "meta-external", "meta-webindexer" and "facebookexternalhit". Which pages they request, and how often, tells you more about your real exposure than the terms do. Because anyone can fake a user-agent name, treat the numbers as a guide rather than proof.

Change 2: You Carry the Risk for AI-Generated Ads

For advertisers, this may be the more practical change. The updated Self-serve Ad Terms (opens in new tab) say Meta's AI features "may make mistakes and may not always produce accurate, complete or suitable results," and continue: "You are solely responsible for and assume any and all risks associated with such AI features and any resulting Ad Creative, including evaluating the suitability of any Ad Creative for your Orders."

They also make the review duty explicit: "You are solely responsible for the Order, Ad Creative, targeting decisions and ad placements, including for reviewing, approving or removing them, even when you use our automated features to assist with the formatting, generation or selection of your Ad Creative and Orders." And you "must not alter or remove any watermark or content-authenticating metadata generated by AI".

The current terms already made advertisers responsible for ad content. What's new is that the text now addresses AI-generated and AI-selected creative by name, and leaves no room to argue that Meta's tool made the mistake.

A five-minute review routine for AI-assisted creative

  1. List which automated creative options are switched on for each live ad. In Ads Manager these are usually in the ad-level creative settings, under Advantage+ creative.
  2. Preview every variation in each placement you run (Feed, Stories, Reels), not just the version you uploaded.
  3. Check every claim the AI may have written or adjusted: prices, discounts, guarantees, "best" or "#1" language, results and health or financial claims.
  4. Check generated or edited images and video against the real product. Colors, packaging, ingredients and what's included must match what you sell.
  5. Read any translations or generated text overlays in full, or switch those features off for markets where nobody on your team can check them.
  6. Make sure the ad still matches the page it sends people to. An offer the landing page doesn't mention costs you customers and trust.
  7. Keep a short record of what you approved and when, and turn off any automated option you can't review regularly.

If you're unsure how much Meta's automation is shaping your ads today, our comparison of boosted posts and Meta ads explains where the controls sit.

Change 3: Arbitration and the 30-Day Opt-Out (U.S.)

The updated Commercial Terms keep an arbitration section for commercial claims. Claims are generally brought individually, through arbitration rather than in court, and not as part of a class action. The Self-serve Ad Terms send disputes to the same clause. There's an opt-out, and the text sets out its timing like this:

“If you do not wish to be bound by this provision (including its waiver of class and representative claims), you must notify us as set forth below within 30 days of the first acceptance date of any version of these Commercial Terms containing an arbitration provision.”

Meta Commercial Terms (updated version), Section 6.c

Notices go to Meta Platforms, Inc., 1601 Willow Rd., Menlo Park, CA 94025, US, according to the same section. The current Commercial Terms, effective March 6, 2024, already contain an arbitration provision with an opt-out. Because the window runs from the first acceptance of any version that contains one, it may already have closed for a business that has used Meta commercially for some time. We can't tell you whether yours has. That depends on your history and on how the clause is interpreted, which is a question for a lawyer.

If arbitration matters to your business, for example because you spend heavily on Meta ads or depend on your Page, ask a lawyer to review the updated Section 6 before November 20, while there's still time to act.

What's Documented, and What Isn't

Much of the coverage mixes the text of the terms with predictions about how Meta will use them. Here's how the main claims sort out:

  • "The deadline is October 30." Out of date. Meta's banners say November 20.
  • "This is just a publisher problem." The crawl clause applies to any business using Meta commercially, and the AI-creative clause applies to every advertiser using Meta's AI features.
  • "Block all of Meta's bots to be safe." That breaks link previews, may affect your ads in ways Meta hasn't documented, and still may not stop the two crawlers Meta says may bypass robots.txt.
  • "Robots.txt makes my private pages private." It doesn't. Anything sensitive needs real access control.

Your Checklist Before November 20

  1. List every Meta business asset you control: Pages, Instagram professional accounts, ad accounts and the people with access.
  2. Read the two updated documents, or at least the crawl, AI-features and dispute sections: the Commercial Terms preview (opens in new tab) and the Self-serve Ad Terms preview (opens in new tab).
  3. Check your server or CDN logs for Meta's user agents to see what they already visit.
  4. Decide your position on meta-externalagent (AI training) and meta-webindexer (Meta AI citations) separately from your advertising.
  5. Leave facebookexternalhit alone unless you have a specific reason to block it, and keep meta-externalads allowed on pages you advertise.
  6. Confirm that private, paid or client content sits behind a real login, not just a robots.txt rule.
  7. Edit robots.txt through your website platform, then check that Google can still crawl your important pages.
  8. Review which Advantage+ and other AI creative options are switched on, and run the creative review routine above on every live ad.
  9. If arbitration matters to you, have a lawyer read the updated Section 6 before November 20.
  10. Set a reminder for November 19 to recheck Meta's pages for any further change in date or wording.

Not sure what your website currently lets Meta's crawlers reach, or what Meta's AI is adding to your live ads? Social Stellor can review your robots.txt, your private pages and your current Meta creative with you, and explain what we find in plain English.

Talk to Our Meta Ads Team

For more on how we run campaigns, see Social Stellor's Meta ads services and social media management. If you're weighing where Meta fits in your wider mix, our comparison of Google Ads vs. Meta Ads is a good next read, and our guide to showing up in AI search covers AI visibility beyond Meta.

Frequently Asked Questions

When do Meta's new Commercial Terms take effect?

November 20, 2026, according to the banners on Meta's current and preview terms pages, checked October 27, 2026. The preview pages' footers still show the original October 30 date. Meta's public statement about the delay supports November 20.

Do the new terms apply if I don't run ads?

The Commercial Terms apply to any use of Meta's products "for a business or commercial purpose", which SEJ reported includes managing a Facebook Page. The Self-serve Ad Terms apply only if you buy ads.

Can I opt out of the website-crawling clause?

The terms don't offer an opt-out from the clause itself. The alternative they give is to stop using Meta's products for business. In practice, you can tell most of Meta's documented crawlers to skip some or all of your site with robots.txt, which Meta has told reporters site owners can still use. That's a technical control Meta has described publicly, not a right written into the contract.

Will blocking Meta's crawlers hurt my ads or link previews?

Blocking facebookexternalhit can break link previews when people share your pages. Meta hasn't published what blocking meta-externalads changes for ads. Blocking meta-externalagent isn't tied to previews or ads in Meta's crawler descriptions.

Is Meta training AI on my website?

The updated terms no longer list training among the purposes for crawling, while the current ad terms do. Separately, Meta's documentation says its meta-externalagent crawler is used for purposes such as training foundation AI models. If you don't want that, disallow meta-externalagent in robots.txt.

Is robots.txt legally binding?

Robots.txt is a technical standard that well-behaved crawlers follow. It isn't a contract, and Meta's updated terms don't mention it. How robots.txt and the terms interact if they conflict is a legal question nobody has settled publicly. Use robots.txt for preferences, and real access controls for anything that must stay private.

Sources and Further Reading

Meta documents were read in U.S. English on October 27, 2026. Meta updates them without notice, so check the live pages before acting. Statements by Meta spokespeople are as reported by the outlets named. Example businesses are hypothetical.

metameta adsfacebookinstagramrobots.txtaismall business
Stay Informed

Get new insights as they publish.