How Replavia follows Instagram and Meta platform rules
Last updated
Replavia asks for only three Instagram permissions and messages only people who contacted you first. Its AI says it is automated, and it deletes data when Meta or the person asks.
Open Account safety →Meta publishes rules for every app that uses Instagram’s API. This page lists, one by one, how Replavia keeps to them. For our App Review and Tech Provider status, see Is Replavia approved by Meta?.
Only the permissions the product needs
When you connect, Replavia asks Instagram for three permissions, and nothing more:
Basic profile
- Why we need it
- To show which account you connected.
Manage comments
- Why we need it
- To read comments that match your keyword, and to reply or hide one when you choose.
Manage messages
- Why we need it
- To send the DMs your automations write.
| Permission | Why we need it |
|---|---|
| Basic profile | To show which account you connected. |
| Manage comments | To read comments that match your keyword, and to reply or hide one when you choose. |
| Manage messages | To send the DMs your automations write. |
We cannot post to your feed, read your password or see your followers list.
Only people who reached out first
Replavia never cold-messages anyone. Every DM answers something the person did: a comment, a story reply, a mention or a DM.
- Each comment gets at most one automated DM, which is Instagram’s rule.
- Replies go out only inside Instagram’s 24-hour window. Replavia does not use message tags to get around it. See Instagram’s 24-hour messaging window.
- Sending stays under hourly and daily limits, with a warm-up for new accounts. See Replavia’s sending limits.
No follow-gating
Meta does not allow an app to hold back a reward until someone follows. In Replavia the person always gets what they asked for first. A follow invite can come after it, never instead of it. Replavia refuses invite wording that makes following a condition. See The follow invite.
Automated replies say they are automated
Instagram asks automated conversations to make that clear. The AI assistant tells the person it is automated when the chat starts, and again after a gap of a day. Saying “talk to a person” hands the chat to you. See The AI DM assistant.
People stay in control of their data
- Replying STOP, UNSUBSCRIBE or CANCEL stops every automated message the person did not ask for. If they DM you again later, your DM automations can still answer.
- If someone unsends the message with their email or phone number, Replavia deletes that detail. It also asks your connected tools to delete it.
- When Meta sends us a data deletion request, Replavia deletes that person’s data on every account that holds it. It also tells connected tools to delete their copy.
- No export or integration ever includes the person’s Instagram user id.
- Before a DM reaches an AI provider, email addresses and phone numbers are removed from the text.
You decide what happens to comments
Comment Shield flags spam and abuse for you to review. Nothing is hidden or deleted until you click. See Comment Shield.
Good to know
- No app can promise that Meta will never restrict an account. Following the rules lowers the risk; it does not remove it.
- Replavia is not affiliated with, endorsed or sponsored by Meta or Instagram.
- The most useful thing you can do is send only what your post promised.