Demo / App Review Flow
Purpose: this page describes the reviewer-facing test flow for Kovcheg Post. It is intended for Meta App Review and for pilot customers who need to understand how account authorization, content publishing and data deletion work.
Reviewer test access
Test credentials will be provided directly in the Meta App Review submission notes. The reviewer account will open a controlled demo workspace with no access to production customer data.
- Demo workspace: Kovcheg Review Workspace
- Role: Workspace Administrator
- Data: test media, test captions and connected assets authorized by the reviewer or by approved test accounts
- Support contact: info@kovcheg-post.com
Review flow overview
- Reviewer logs in to the Kovcheg Post demo workspace.
- Reviewer opens Connected Accounts.
- Reviewer starts Meta OAuth and grants the requested permissions.
- Reviewer selects a Facebook Page, Instagram professional account or Threads profile.
- Reviewer uploads a photo, writes a caption and chooses target platforms.
- Reviewer submits the publication request.
- Kovcheg Post displays queue status, platform response and delivery result.
- Reviewer disconnects the social account or opens the data deletion instructions.
Step 1: Connect accounts
The user connects accounts through an official OAuth flow. Kovcheg Post does not collect social platform passwords and does not use scraping, browser sessions or unofficial access methods.
- Facebook Pages: the user selects Pages they manage.
- Instagram: the user connects eligible Instagram professional accounts.
- Threads: the user connects a Threads profile when the API permission is available.
Step 2: Prepare publication
The reviewer can create a test publication using a photo, caption and target platform selection. The interface shows which connected assets will receive the content before the request is submitted.
Example test post: Media: review-photo.jpg Caption: Test publication from Kovcheg Post review workspace Targets: Instagram, Facebook Page, Threads Mode: Publish now or add to queue
Step 3: Publish and show status
After submission, Kovcheg Post creates a queue item and calls the selected platform APIs. The demo view shows the status of each target separately, including success, pending, failed, reconnect required or permission required.
| Target | Status shown to reviewer | Reason |
|---|---|---|
| Published or permission required | Depends on granted Instagram permissions and test account eligibility | |
| Facebook Page | Published or failed with platform error | Uses selected Page authorization |
| Threads | Published or pending review | Depends on Threads API access and app review status |
Permissions used in this flow
- pages_show_list: display Pages the user can select.
- pages_read_engagement: read Page metadata required for account selection and status display.
- pages_manage_posts: publish user-approved posts to selected Facebook Pages.
- instagram_business_basic: display connected Instagram professional account details.
- instagram_business_content_publish: publish user-approved media to Instagram professional accounts.
- threads_basic: display connected Threads profile details.
- threads_content_publish: publish user-approved content to Threads.
Messaging and comments
Messaging and comment automation are optional follow-up features. If requested in a later review, the reviewer will see a separate flow where incoming messages or comments are displayed in the demo inbox and the user sends a manual or rule-based reply. These features require separate approved permissions and are not used for password collection or unauthorized monitoring.
Data deletion and disconnection
The reviewer can disconnect connected social accounts from the demo workspace. Users can also revoke access from their Meta account settings. Full deletion instructions are available here: User Data Deletion Instructions.
Security notes
- Kovcheg Post uses HTTPS and OAuth-based authorization.
- Access tokens are stored on the backend and are not exposed in the browser.
- Publishing actions require a user-selected target account and user-approved content.
- Users can disconnect accounts and request deletion of stored data.
- Kovcheg Post is independent and is not affiliated with Meta, Instagram, Facebook or Threads.