Meta App Review Readiness

Permission usage, screencast evidence, and reviewer instructions in one place.

Use this page to complete Meta submission fields for whatsapp_business_messaging, business_management, public_profile, whatsapp_business_management, and email.

Run end-to-end onboarding Open callback endpoint

Submission Checklist

Add permission usage text for all five requested permissions.
Upload one end-to-end screencast covering onboarding and callback success.
Complete required API test calls for business_management.
Attach reviewer instructions with test credentials and URLs.
Confirm Privacy, Terms, and Data Deletion pages are publicly accessible.

Permission Usage Text

Copy and paste the relevant text into Meta App Review fields.

whatsapp_business_messaging

CYBEXO uses whatsapp_business_messaging to operate customer-authorized WhatsApp messaging workflows after Embedded Signup is completed. The permission is used to send approved business-initiated templates, send session replies to inbound customer messages, and retrieve delivery/read status via webhook events for operational visibility.

Each business explicitly authorizes CYBEXO during Meta Embedded Signup before any messaging is enabled. Messaging is scoped per tenant and per connected phone number. CYBEXO does not send unsolicited or unrelated traffic and does not use this permission for prohibited messaging categories.

business_management

CYBEXO uses business_management only to support Embedded Signup onboarding and secure management of business assets that customers explicitly share with CYBEXO (business portfolio, WhatsApp Business Account, and linked phone assets).

This permission is required to read and manage the minimum business-asset metadata necessary to complete onboarding, maintain connection health, and provide tenant-scoped status in CYBEXO.

public_profile

CYBEXO uses public_profile to identify the operator completing onboarding (basic identity attributes only) and to associate actions with audit records in our platform for account accountability and troubleshooting.

whatsapp_business_management

CYBEXO uses whatsapp_business_management to onboard and maintain customer-authorized WhatsApp Business assets through Meta Embedded Signup. This includes reading and managing connected WhatsApp Business Accounts and phone-number metadata, validating readiness state, and maintaining integration health for API messaging operations.

email

CYBEXO uses email only to identify the authenticated operator account, map access to the correct tenant context, and send operational notices related to onboarding and integration status.

Screencast Storyboard

Open /waba/embedded-signup/connect and show authenticated operator context.
Create signed state and launch standard onboarding.
Complete Meta consent and show callback success ok=true.
Open tenant connection status and show linked WABA/phone readiness.
Show one controlled message send and webhook evidence path.
Open Privacy, Terms, and Data Deletion pages before ending recording.

business_management API Test Calls

GET /me?fields=id,name
GET /me/businesses?fields=id,name
GET /<BUSINESS_ID>/owned_whatsapp_business_accounts?fields=id,name
GET /<WABA_ID>/phone_numbers?fields=id,display_phone_number,verified_name

Reviewer Instructions Template

1) Open https://cybexo.ai/waba/embedded-signup/connect
2) Sign in with reviewer test credentials provided by CYBEXO.
3) Click "Create signed state", then launch onboarding.
4) Complete consent and verify callback shows ok=true.
5) Verify policy pages:
   - https://cybexo.ai/privacy
   - https://cybexo.ai/terms-of-service
   - https://cybexo.ai/data-deletion