Meta Privacy Guide
$19
I went looking for the little padlock icon on my Instagram DMs last week — the one that used to sit at the top of a client thread. Gone. Meta quietly ended end-to-end encryption on Instagram DMs this past May. If you've ever sent a contract, a deposit, or a proof gallery through an Instagram DM because that's where your client already was, that conversation no longer has the protection it briefly had.
That sent me down a rabbit hole into everything else Meta collects from a working artist's business account. It's more than DMs. Your business page and your personal profile are probably tangled together, and Meta's systems don't sort "business you" from "personal you." Your follower data — age, location, when they're online — gets collected before you ever see a slice of it in Insights. And if you've put a Meta Pixel on your own website, Meta is tracking visitors there too, including people who've never made a Facebook or Instagram account. Since 2024, your posts and photos have also been fair game to train Meta's AI, and if you're US-based, there's currently no policy opt-out — only a narrower objection you can file.
None of this is a mustache-twirling conspiracy. It's the terms you clicked through, running quietly in the background of a business you built to make art, not to be studied. The cost isn't abstract either: client conversations sitting somewhere less protected than you assumed, your personal life feeding the same data pool as your shop updates, and your audience's data sold to whoever's buying this quarter — with no setting that undoes that last part.
This guide walks you through all four places Meta touches your business — your account, your messaging, your audience data, and Meta AI — and shows you exactly where the real off switches are. Not vague advice to "check your privacy settings." The actual menu paths, screenshots included, for what you can turn off, what you can't, and what each opt-out does and doesn't cover. It ends with a one-page scorecard so you can track what's done. Policies verified as of August 2026.
I'm Paul Caloca. I've spent thirty years in information security — CISSP, CISM, CISA, CCSP, PCIP — reading what a company actually does with your data for a living. I'm also a photographer running my own business through these same platforms. This isn't theory for me either.
$19.00. PDF. One-time. Yours to keep.
Paid subscribers to Essential Risk Management get this free — it's already part of your subscription. Everyone else can grab it here, once, no subscription required.
Meta isn't going to send you a memo when they change what they collect next. This is the afternoon you find out what you've already agreed to, and decide — on purpose this time — what stays and what goes.
$19
Menge
$19