What OwnersPal asks for, and why

Google Business Profile

We ask for: https://www.googleapis.com/auth/business.manage

So that we can: read your business information and publish the listing updates, posts, and fixes you approve to your Google Business Profile.

We never: change your Google Business Profile without your approval. Review auto-replies stay off until you turn them on.

Facebook Page

We ask for: business_management,pages_manage_posts,pages_read_engagement,pages_show_list,read_insights

So that we can: find your Facebook Page, including a Page you manage through a Meta business portfolio (Meta lists those only with business_management), publish the posts you approve to it, and read engagement so we can show you how your posts performed.

We never: post to your Facebook Page without your approval, change your Page's details to anything other than the business details you keep in OwnersPal, or change anything in your Meta business portfolio.

Instagram

We ask for: business_management,instagram_basic,instagram_content_publish,instagram_manage_insights,pages_read_engagement,pages_show_list

So that we can: find the Instagram account linked to your Facebook Page (including a Page in a Meta business portfolio, which Meta lists only with business_management), publish the posts you approve to it, and read basic account info and engagement.

We never: post to your Instagram account without your approval, or change anything in your Meta business portfolio.

Instagram (Business Manager owners only)

We ask for: ads_read,ads_management

So that we can: publish the Instagram posts you approve and read your Instagram stats when your Facebook Page is managed through Meta Business Manager — Meta requires both permissions for those accounts. We ask for them only if Instagram turns down a request for this reason and you choose Reconnect with Business Manager access. Meta grants them for Meta ads too, so when you choose to connect a Meta ad account they also let us list the ad accounts you can manage, and create and manage the Meta ad campaigns you approve.

We never: ask for them when you connect Instagram the normal way, use them for Meta ads before you start connecting a Meta ad account, or create or start a campaign you haven't approved.

Instagram (without a Facebook Page)

We ask for: instagram_business_basic,instagram_business_content_publish

So that we can: publish the posts you approve to your Instagram account and read basic account info — using Meta's Instagram Login, no linked Facebook Page required.

We never: post to your Instagram account without your approval.

TikTok

We ask for: video.publish,user.info.basic

So that we can: show which TikTok account you're posting to and the choices it allows, then publish the videos you send from the TikTok post screen — with the privacy level, interaction settings and content disclosure you pick there.

We never: publish a TikTok video you haven't sent yourself from the TikTok post screen, or choose its privacy level or settings for you.

TikTok Ads

We ask for: Ad Account Management, Ads Management, Creative Management, Reporting

So that we can: list the TikTok ad accounts you allow, then — in the one you pick — create, pause and resume the campaigns you approve, upload their video, and read their daily results and spend.

We never: create or start a TikTok campaign you haven't approved, or use an ad account you didn't pick.

X

We ask for: tweet.read tweet.write users.read media.write offline.access

So that we can: post the content you approve, read your posts and account info to show performance, and stay connected without asking you to sign in again.

We never: post to X without your approval.

LinkedIn

We ask for: w_organization_social rw_organization_admin

So that we can: post the content you approve to your LinkedIn Page, read basic Page info and engagement to show performance, and stay connected without asking you to sign in again.

We never: post to your LinkedIn Page without your approval.

YouTube

We ask for: https://www.googleapis.com/auth/youtube.upload https://www.googleapis.com/auth/youtube.readonly https://www.googleapis.com/auth/yt-analytics.readonly

So that we can: upload the videos you approve to your YouTube channel, show you which channel is connected, and read your channel’s view, like, comment, share and subscriber counts for your reports.

We never: upload a video to YouTube without your approval, or change or delete videos already on your channel.

Ad accounts

Optional — we only ask for ad-account access if you choose to connect one.

• Meta (Facebook and Instagram ads): ads_read,ads_management
• Google Ads / Google LSA: https://www.googleapis.com/auth/adwords
• Microsoft Advertising: https://ads.microsoft.com/msads.manage
• Nextdoor: ads.read ads.write
• Yelp: ads.read ads.write

So that we can: create and manage the ad campaigns you approve on the ad platform you connect.

We never: spend money on ads without your own Deploy click, and never from any account but your own — OwnersPal never pays for your ads.