01
Basic profile and media
instagram_business_basic
Read your Instagram profile and list posts and Reels so you can attach automations to the right media.
Meta
Official Instagram Login, four OAuth scopes, webhooks, private replies, and publish. Shopify Admin APIs are a separate shop integration. Written for creators, Meta App Review, and Shopify App Store review.
Last updated October 26, 2026
Permissions
We only request what the product needs: profile and media, comments, messages, and content publish for dashboard posting.
01
instagram_business_basic
Read your Instagram profile and list posts and Reels so you can attach automations to the right media.
02
instagram_business_manage_comments
Hear new top-level comments via webhooks and optionally post a short public reply under a matching comment.
03
instagram_business_manage_messages
Send private replies and allowed DMs through official Graph APIs when a keyword matches. On paid plans, receive and show your DMs in the inbox so you can reply inside Instagram's messaging window.
04
instagram_business_content_publish
Publish or schedule posts and Reels from the dashboard when you create content with an automation attached.
Send Link To Me ("we", "us", or "our") uses Meta and Instagram APIs on customers' connected Instagram Professional accounts so creators and Meta App Reviewers can see our intended use of Platform Data.
Creators connect Instagram with Instagram Login for Business or Creator accounts.
We request four OAuth scopes: instagram_business_basic, instagram_business_manage_comments, instagram_business_manage_messages, and instagram_business_content_publish. The cards on this page summarize each one.
Once Meta approves it, we will also request instagram_business_manage_insights. It reads views, reach, saves, shares and watch time for your own posts and account. We show these numbers to you in the Posts view. Coach does not use them today; if that changes, we will update this page first.
Tokens are stored encrypted and used only to call Meta on your behalf.
From OAuth and profile: Instagram user id, username, name, profile picture URL.
From media listing: media ids and captions needed to attach automations to posts and Reels.
Video URLs and images of reels and posts you let Coach watch or look at, including new reels watched automatically while you use Coach (used once, then the copy is deleted).
Like, comment and follower counts, saved daily for accounts where you turned on Coach.
From comment webhooks: comment id, media id, comment text, commenter id and username.
From messaging APIs: message delivery identifiers and error responses for private replies and attachments we send.
From messaging webhooks, on paid plans with the inbox: direct messages sent and received on the connected account (text, attachments, reactions, edits, unsends, Seen receipts, and ad or link referrals) with the sender's Instagram-scoped id.
From the Conversations API, once when the inbox is first opened: up to the last 20 messages of each existing conversation, which is Meta's limit.
From the User Profile API: the name, username, profile picture, follower count, verified badge, and follow status of people who message the account.
From messaging webhooks, on every plan: the text of DMs, shared posts and Reels, quick reply payloads, and Ice Breaker or menu taps, used only to match the account's DM keyword automations and to build its missed demand report.
From publish APIs: media creation and publish status when you publish or schedule from the dashboard.
We subscribe to comments, live_comments, messages, messaging_postbacks, message_reactions, messaging_seen, message_edit, and messaging_referral webhooks for connected accounts so we can detect new comments and button taps in near real time and, on paid plans, show messages in the inbox.
Incoming webhooks are verified with the Meta app signature. Events are queued and processed to match your automations.
When a top-level comment matches your keyword rule, we send a private reply DM using Meta private reply APIs, optionally with button, carousel, or media templates (plan-gated).
You can also run those same actions from a connected assistant. Publish and private replies from the assistant still use these official permissions. The assistant does not receive extra Instagram permissions.
Coach can propose an automation, a change to one, or a post to schedule or publish. It is created only after the account owner taps Confirm, through the same official API calls as the dashboard.
We may also post a short public comment reply if you enable it.
On paid plans, the account owner can read messages in the inbox and reply. Inbox replies are sent only within Instagram's 24 hour window after the person's last message. We do not use message tags to message people outside that window.
Marking a conversation as Seen on Instagram is off by default and only happens if the account owner turns it on.
DM keyword automations reply only when a DM contains one of the owner's keywords, shares one of the owner's own posts, or taps an Ice Breaker, menu item or quick reply the owner set. They reply at most once a day per person and automation, never to DMs that match nothing, and stay quiet after the owner replies by hand.
Ice Breakers and the Persistent Menu are set on the account's messenger profile through the official messenger_profile API, and removed the same way when the owner clears them.
We respect Meta limits: roughly one private reply per comment, a limited reply window after the comment, and about 750 messaging actions per hour per Instagram account. Excess volume is queued and retried.
Coach is an optional AI chat on paid plans. It is off until you turn it on for an Instagram account, after a screen that explains this processing. When it is on, Coach processes: your reels with their sound (up to 10 when it learns your account, then new reels you post while you use Coach, plus any reel you add with @); your photo and carousel posts; the captions and like and comment counts of your recent posts; comments people left on your reels (only their text, without who wrote them); your follower count; your automations, their keywords and what they brought in (DMs sent, link clicks, leads and orders); your answers to Coach's questions; the videos (up to 1 GB), images and YouTube links you attach, and scheduled posts you ask it to check; the reels and posts you saved to Saved reels, when you use one in a chat; in the Shopify app, the titles, prices and pages of products it looks up in your store; your Coach profile, voice rules, chats and saved items; and daily follower, like and comment counts for the account. Coach does not read your DMs.
Coach uses AI service providers under written contracts that let them process this data only to provide Coach to you. They do not use it to train their models. To watch a reel, we copy the video to temporary cloud storage, the provider analyses it, and we delete the copy right after; a storage rule removes any copy left behind within one day. Files you attach are kept in that temporary storage for up to a day, then deleted. Each provider may keep inputs for a limited time to detect abuse, under its terms. How long each provider keeps inputs is in our Privacy Policy at https://sendlinkto.me/privacy#ai-processing.
When the creator asks Coach for trends, a web search receives the account's niche, region and language and a short summary of its Coach profile (niches, formats, audience and kinds of offers), never Instagram media, captions, comments, names, handles or links. Coach reads the result to pick the trends that fit and to write ideas; it is shown only to that creator and kept in their Coach chats.
The Trending page, on every plan, can search YouTube and the web with up to 5 topic words made from the account's Coach profile (such as saree or handloom), never Instagram media, captions, comments, names, handles or links.
Coach processes each creator's data only for that creator. We do not combine creators' data, build benchmarks across creators, or train any model on it. Coach comments on your content, never on you as a person.
No scraping, no unofficial Instagram clients, no buying engagement.
We do not message people who never interacted in a way Meta allows for private reply or messaging windows.
We do not sell Platform Data or use it outside providing this product.
We do not train AI models on Platform Data.
We do not download other creators' reels.
We do not compare or combine creators' data.
Coach does not read DM text.
You can disconnect an Instagram account in the dashboard. That deletes tokens and cascaded data for that account and stops API calls.
You can revoke the app from Instagram or Meta Business / Apps and Websites settings at any time.
We implement the Meta Data Deletion Request Callback so removal requests from Meta delete matching Platform Data. See our Privacy Policy for retention and full-account deletion in Settings.
The Shopify App is a separate integration from Meta. Product, collection, discount, and order data come from the merchant's Shopify shop through Shopify Admin APIs.
Instagram Platform Data is used to run comment-to-DM, the inbox and, when you turn it on, Coach. We do not sell Platform Data.
Lead fields the merchant asked for in chat (email, name, phone) may be saved on that shop as customers.
By connecting Instagram, you acknowledge Meta Platform Terms and Instagram policies. We will update this page when our API usage changes materially.
Contact: support@sendlinkto.me. Location: Chennai, India.
Questions
We can clarify the fine print
For account, billing, deletion, or Meta permission questions, use live chat or email. For product limits, the FAQ and pricing pages have the short version.