Muse de Meta and your business, what happened in October
Muse de Meta passed 10 million downloads in 40 days, according to Sensor Tower. Most of them were in the US. Meta says shopping is one of the top things people use it for. Three stories this month matter to a business.
One click on "Allow always," and the agent gave out his address
On Oct 21, CBC told the story of a Toronto man. He'd asked Muse de Meta to handle his Facebook Marketplace sales. A buyer wrote in. The agent agreed to the buyer's price, gave him the man's home address and told him to come right away. The man had no idea. He wasn't even home.
He had clicked "Allow always" instead of "Allow one time." He says that click let the agent send messages for him, with his pickup address in them. Meta says it confirmed with him that no privacy controls were breached. That's the point. The agent did what the click allowed.
Share links that exposed business files
On Oct 20, Ars Technica reported that the security firm Claroc had found 6,800 share links from Muse de Meta. Each link put the chat's title in the web address, and public records kept those addresses. In the chats they opened, the researchers found a small business owner's loan application, a marketing company's revenue review and a full-year staff vacation calendar. Meta paused sharing while it reviews the problem.
A shared chat is a web page. If an employee put a client file in it, that's a Law 25 question. Our Law 25 page covers what not to paste into an AI tool.
Meta's new terms and your website
Meta is updating its Commercial Terms. They apply whenever you use Meta for business, like running a Page or buying ads. They take effect on Nov 20, 2026. The original date was Oct 30. Meta pushed it back on Oct 23 after publishers complained.
The terms let Meta crawl, copy and analyze websites "associated with" your products or services. They also let Meta come back for updates. The stated use is to provide and "develop" Meta's advertising and business products.
After the backlash, Meta took the word "train" out of the text. Lawyers quoted by Nieman Lab say "develop" is still broad enough to cover AI training. Meta hasn't said what removing the word changes in practice.
There's no opt-out. If you don't accept the terms, Meta tells you to stop using its products for business. Meta says it respects your site's robots.txt file. The terms don't say so.
Five questions before an agent works for you
Ask them before anyone connects Muse de Meta, or any other agent, to a company account. If nobody can answer, the agent waits.
1. What can it read?
An agent reads whatever you connect. Meta offers to link Muse de Meta to tools like QuickBooks, Shopify, Slack and your Facebook, Instagram and ad accounts. Each connection opens one more door. If the inbox holds client files, the agent reads those too.
Think about the people who write to you. Cybersecurity expert Éric Parent made this point to CBC. They expected you to read their message, not an agent. Before you connect anything, write down what it would see.
2. What can it send?
Reading and sending are different risks. An email to a client, a Marketplace message, a post on your Page or a purchase all reach someone outside the company. Meta says nothing sends without your approval. For the Toronto man, the approval was the "Allow always" click.
Decide up front what the agent can send on its own. For a small business, the right starting answer is often nothing. The agent writes the draft. A person sends it.
3. Allow once, not always
"Allow always" means yes to every future time, including the ones you didn't picture. "Allow one time" asks you again for each action. It's slower on purpose.
Go back over the permissions people have already given. Meta says Muse de Meta keeps a log of everything the agent has done. Read it during the first week.
4. Never your bank login
Don't give an agent your banking password. On Oct 13, JPMorgan Chase confirmed to CNBC that it blocks third parties that log in to accounts with a customer's credentials. Its spokeswoman said it isn't safe.
Check your own bank's terms before you connect anything. Apply the same rule to the company credit card and payroll.
5. Who at your company says yes?
Someone has to decide which agents come into the company, and with what access. If nobody does, every employee decides alone, at night, on their phone. A CRIMT and IVADO study reported by Le Devoir found 43% of Quebecers already use AI at work.
Name one person. Write the rule on one page and add it to your AI use policy. If you don't have one yet, start with that page. To go further with the agents already in Copilot, ChatGPT or Claude, read where a small business should start with AI agents.
Before Nov 20, your website and your Page
There's nothing to uncheck at Meta. What you control is your website and who runs your Page.
- Look at what's public on your site. If a visitor can open it without a password, a crawler can read it. An old PDF, a forgotten page or a client document in a public folder should come down.
- A robots.txt file can ask Meta's crawlers to stay off your site, with no guarantee they listen. If you block all of them, your links lose their preview on Facebook. Ask the person who manages your site.
- List everyone who runs your Page and your ads, agency included. The terms cover them when they act for you.
- If a client contract bars you from letting a third party read some content, talk to your lawyer before the 20th.
Agents like Muse de Meta also shop for your customers. If your hours, your services and how to reach you are written plainly on your site, an agent can find them.
Questions
What is an AI agent, and how is it different from a chatbot?
An AI agent does tasks for you. It reads, fills in, sends or buys, based on the access you give it. A chatbot mostly answers questions. ChatGPT, Copilot and Claude now have agent features too. The more a tool can do on its own, the more you need to decide up front what it can touch.
Is Muse de Meta safe for business use? What can it see?
It sees what you connect, like email, calendars, files and business accounts. Meta says Muse de Meta is free for most uses, with paid plans for more. In October, an agent gave out a user's address after an "Allow always" click, and share links exposed business files. We have no affiliation with Meta. Run the five questions above before you connect a company account.
Should employees connect AI agents to work email?
Only if someone at your company approved it, and you know what's in the inbox. An agent that reads email also reads client files and messages from people who never agreed to it. Start with read-only access. Keep sending for a person. For personal information, see what an agent can see of your data.
"Allow one time" or "Allow always," which one do I pick?
Pick "Allow one time" at the start. "Allow always" approves every action of the same kind, including ones you didn't expect. That's how one man's agent gave out his address on Marketplace. Once you know the tool well, you can revisit the setting one action at a time.
Can I give an AI agent access to my bank account?
No. Never give an agent your banking login. JPMorgan Chase already blocks third parties that log in with a customer's credentials, and says it isn't safe. Check your own bank's terms. Keep the company credit card and payroll out of reach too.
Can Meta scrape my business website?
Starting Nov 20, 2026, Meta's Commercial Terms let it crawl websites tied to a Page or ads, for its advertising and business products. Meta removed the word "train," but lawyers say "develop" may still cover it. Business accounts can't opt out of the terms. This isn't legal advice.
Can I block Meta's crawler with robots.txt?
Partly. Meta says it respects robots.txt, a file that asks crawlers to stay off your site, with no guarantee they listen. If you block all of them, your links lose their preview on Facebook. Ask the person who manages your site.