[agret]

I assume the Facebook message is through a Facebook bot running embedded on the website. It won't automatically collect your data until you interact with it and that falls under the Facebook privacy policy since the individual site doesn't have access to anything more than your Facebook name and public profile picture.