How we use Meta APIs

Send Link To Me ("we", "us", or "our") uses Meta and Instagram APIs on customers' connected Instagram Professional accounts so creators and Meta App Reviewers can see our intended use of Platform Data.

Creators connect Instagram with Instagram Login for Business or Creator accounts.

We request four OAuth scopes: instagram_business_basic, instagram_business_manage_comments, instagram_business_manage_messages, and instagram_business_content_publish. The cards on this page summarize each one.

Tokens are stored encrypted and used only to call Meta on your behalf.

From OAuth and profile: Instagram user id, username, name, profile picture URL.

From media listing: media ids and captions needed to attach automations to posts and Reels.

From comment webhooks: comment id, media id, comment text, commenter id and username.

From messaging APIs: message delivery identifiers and error responses for private replies and attachments we send.

From publish APIs: media creation and publish status when you publish or schedule from the dashboard.

We subscribe to comment and messaging-related webhooks for connected accounts so we can detect new comments and button postbacks in near real time.

Incoming webhooks are verified with the Meta app signature. Events are queued and processed to match your automations.

When a top-level comment matches your keyword rule, we send a private reply DM using Meta private reply APIs, optionally with button, carousel, or media templates (plan-gated).

We may also post a short public comment reply if you enable it.

We respect Meta limits: roughly one private reply per comment, a limited reply window after the comment, and about 750 messaging actions per hour per Instagram account. Excess volume is queued and retried.

No scraping, no unofficial Instagram clients, no buying engagement.

We do not message people who never interacted in a way Meta allows for private reply or messaging windows.

We do not sell Platform Data or use it outside providing this product.

You can disconnect an Instagram account in the dashboard. That deletes tokens and cascaded data for that account and stops API calls.

You can revoke the app from Instagram or Meta Business / Apps and Websites settings at any time.

We implement the Meta Data Deletion Request Callback so removal requests from Meta delete matching Platform Data. See our Privacy Policy for retention and full-account deletion by email.

The Shopify App is a separate integration from Meta. Product, collection, discount, and order data come from the merchant's Shopify shop through Shopify Admin APIs.

Instagram Platform Data is still used only to run comment-to-DM. We do not sell Platform Data.

Lead fields the merchant asked for in chat (email, name, phone) may be saved on that shop as customers.

By connecting Instagram, you acknowledge Meta Platform Terms and Instagram policies. We will update this page when our API usage changes materially.

Contact: support@sendlinkto.me. Location: Chennai, India.