Meta Integration

1. What Aeon Kairos Is

Aeon Kairos is a multi-tenant business operations and CRM platform, starting with gyms and boutique fitness studios. Each business on Aeon Kairos manages its own members, leads, staff, and communications in an isolated account.

The Meta integration lets a business connect its own Facebook Page and, optionally, its own Meta ad account so that leads from its Instant Forms arrive in its Aeon Kairos lead pipeline and its staff can see and manage ad performance alongside their other operations.

2. How a Business Connects

• Only a business's owner or admin in Aeon Kairos can connect, change, or disconnect the Meta integration, or make changes to ads. Other staff can view Meta information but cannot change it.
• The owner or admin connects with Facebook Login for Business. Authorization is completed server-side.
• After authorizing, they choose in Aeon Kairos which Facebook Page to connect (required) and, optionally, which ad account. Aeon Kairos verifies that the selection matches what the person granted in Facebook.
• A Facebook Page can be connected to only one Aeon Kairos business location at a time.
• If an Instagram professional account is linked to the Page, Aeon Kairos may detect it, but does not use it for any feature today.
• The business can disconnect at any time from within Aeon Kairos, or remove Aeon Kairos from its Facebook settings (Business Integrations).

3. What Aeon Kairos Does with Meta Today

Lead capture

• Aeon Kairos subscribes the selected Page to Meta's lead (leadgen) webhook, and can also pull recent Instant Form submissions on demand.
• Each submission becomes a lead in that business's Aeon Kairos lead pipeline, including name, email, phone, form answers, and the form, ad, ad set, and campaign IDs.
• Duplicate submissions are prevented.

Ad reporting

• Campaign, ad set, and ad status, budgets, spend, impressions, clicks, and leads.
• A daily sync of ad-level performance, used to attribute leads to the ads that produced them.

Ad management

• Pause and resume campaigns, ad sets, and ads.
• Change daily budgets.
• Create new lead campaigns, which always start paused.

Spending controls set by the business

• Aeon Kairos refuses any budget above the business's maximum daily budget, and refuses all budget changes until the business sets a maximum.
• Activating or resuming ads is only allowed if the business turns that option on. Pausing is always allowed.

Activity log

Every consequential Meta action — connecting, selecting assets, disconnecting, syncing leads, changing ads, and blocked attempts — is recorded in an activity log the business can see.

4. What Aeon Kairos Does Not Do Today

• Does not offer Messenger or Instagram Direct messaging, comment management, or Facebook and Instagram publishing to customers yet — see section 8
• Does not create ad creatives or ads
• Does not use AI to send Messenger or Instagram messages
• Does not use one business's Meta data for any other business

5. Data Accessed and Why

The features available today use these Meta permissions (the features in section 8 will use additional messaging, comment, publishing and insights permissions once Meta approves them):

• pages_show_list — list the Pages the person manages so they can choose one to connect
• pages_read_engagement and pages_manage_metadata — read basic Page details and subscribe the selected Page to the lead webhook
• pages_manage_ads and leads_retrieval — retrieve Instant Form lead submissions for the selected Page
• ads_read — read campaign, ad set, and ad status, budgets, and performance for reporting and attribution
• ads_management — pause and resume ads, change daily budgets, and create paused lead campaigns, when the business's owner or admin initiates it
• business_management — list the business assets (such as ad accounts) the person can choose to connect

In short, Aeon Kairos accesses the names and IDs of the Page, ad account, and business the person selects; Instant Form lead submissions for the connected Page; and ad structure, budgets, and performance for the connected ad account. This data is used only to provide the features above to the business that connected it.

Storage and security

• Meta access tokens are stored encrypted in the database's secret vault (Supabase Vault), used server-side only, and never sent to the browser.
• Meta API calls use appsecret_proof.
• Incoming Meta webhooks are verified using Meta's signature.
• Each business's data is isolated through row-level security and per-location access checks.
• Data is stored with Supabase (database) and the application is hosted on Vercel.

6. Ownership and Control

Each business connects and controls its own Meta assets. Leads imported from a business's Instant Forms are that business's customer records. Aeon Kairos never uses one business's Meta data for another business.

If a business has turned on automated AI follow-up (the AI Nurture add-on), leads from its Instant Forms can receive SMS and email follow-ups configured by that business. This follow-up happens over SMS and email only, never through Messenger or Instagram. See our Privacy Policy for details.

7. Disconnection and Data Deletion

Disconnecting in Aeon Kairos

Aeon Kairos deletes its stored Meta access tokens for that business location, unsubscribes the Page from Aeon Kairos's lead webhook, and stops retrieving data from Meta.

Removing Aeon Kairos in Facebook, or requesting deletion

If you remove Aeon Kairos in your Facebook settings, or send a data-deletion request through Facebook, Aeon Kairos deletes the access tokens for every business location connected through your Facebook user and clears the stored Page, ad account, business, and Instagram names and IDs. For deletion requests, you receive a confirmation code and a status page.

Learn more or check a request: app.aeonkairos.com/data-deletion

What is not automatically deleted

• Leads already imported are the business's customer records and are not automatically deleted when Meta is disconnected. The business can delete them in Aeon Kairos.
• Ad performance metrics already synced remain part of the business's reporting history until the business account is deleted.
• If you submitted a lead form to a business and want your information removed, contact that business directly, or email privacy@aeonkairos.com.

8. Pending Meta Approval

We have built Messenger and Instagram messaging, comment management, and Facebook and Instagram image publishing, and are completing Meta's verification and App Review for the permissions they require. These features are not yet available to customers. We will update this page and our Privacy Policy with full details before they launch.

9. Company