Security

Security and account safety

ReplyRep is built so that automating your DMs never puts your Instagram account at risk: official API, no passwords, Meta's limits respected, and messages only to people who asked.

Official API, no passwords

ReplyRep is a Meta Business Partner and connects through Meta's official Instagram API. You log in on Meta's own screen and grant specific permissions. ReplyRep never asks for, sees or stores your Instagram password. Tools that ask for your password log in as you, which Instagram's terms do not allow and which is what gets accounts flagged. More in official API vs password tools.

Only people who interacted first

Every DM ReplyRep sends answers something: a comment, a story reply, a story mention or a message. It cannot cold message people, by design and by Meta's rules. See is Instagram DM automation allowed?

Inside Meta's limits

Meta caps how fast any app can send. ReplyRep stays inside those limits. On paid plans, anything over the limit waits in the Excess DM Queue and goes out in order rather than being forced through. Read about Instagram DM limits.

Your data

  • Leads you capture (emails, phone numbers) are yours. Export them as CSV or sync them to your email tool.
  • You can disconnect ReplyRep at any time from the app or from Instagram's settings, which revokes its access.
  • How we handle personal data is set out in the privacy notice.

Report a security issue

Email support@replyrep.io with "Security" in the subject. We read and answer every report.