How Pricify Creator uses Instagram permissions
Pricify Creator helps Instagram creators turn comments and messages into product-link replies. A creator connects their own professional Instagram account, picks a post and a keyword, and when a follower comments that keyword, Pricify sends the creator's product link to that follower by direct message — optionally only after the follower follows the creator.
What we ask for, in one table
Three permissions. Each one is used by a screen you can see in the flow below, and nothing else.
| Permission | What Pricify does with it | Where you see it |
|---|---|---|
| instagram_business_basic | Reads the creator's profile (username, account type, picture) to show who is connected, and lists the creator's recent posts so they can choose which post an automation belongs to. | Steps 3 and 4 |
| instagram_business_manage_comments | Receives comments on the creator's posts so the keyword can be recognised, and (if the creator turns it on) posts a short public reply such as “Check your DMs” under the comment. | Steps 5 and 6 |
| instagram_business_manage_messages | Sends the product link as a private reply to the comment, receives the follower's “I've followed” answer, and reads the single field is_user_follow_business to check that the follower follows the creator before the link is sent. | Steps 6 and 7 |
We do not post, edit or delete the creator's content, we do not read DMs that are not part of an automation the creator set up, and we do not message anyone who has not commented a keyword or messaged the creator first.
The flow, step by step
The screens drawn below are illustrations of the real screens at pricify.chat/ig/dashboard and in the Pricify Creator Android app.
Creator taps “Continue with Instagram”
On the Pricify Creator sign-in screen (app) or the web dashboard. The creator can register this way, sign in this way, or connect Instagram to an account they already have.
- Entry points:
/ig/connect(web) and the “Continue with Instagram” button in the app. - Pricify records whether the account was created directly or through Instagram, so support can help the right way.
Instagram asks the creator to allow access
The creator is sent to Instagram's own login and permission screen. Pricify never sees their Instagram password. The screen lists the three permissions above and the creator chooses Allow or cancel.
- Only professional (Business or Creator) accounts can connect.
- Cancelling returns to Pricify and nothing is connected.
instagram_business_basicinstagram_business_manage_commentsinstagram_business_manage_messages
Pricify Creator wants to:
• Manage comments
• Manage messages
Pricify shows the connected account
The creator lands on the dashboard with their Instagram username, picture and account type. This uses instagram_business_basic.
- The access token is stored encrypted and refreshed automatically before it expires.
- The creator can disconnect at any time from the dashboard.
● Connected @creator_nameNew automation
Creator makes an automation: post + keyword + product link
The creator picks one of their recent posts (loaded with instagram_business_basic), types the keywords that should trigger a reply (for example LINK), and adds one or more product links. Links are shortened to pricify.chat/… so clicks can be counted for the creator.
- Optional: “Ask the person to follow me first”.
- Optional: a short public reply under the comment.
A follower comments the keyword
Instagram sends the comment to Pricify's webhook (/instamine, field comments). Pricify checks the text against the creator's keywords for that post. Comments that do not match are ignored and not stored. This uses instagram_business_manage_comments.
- One automated message per person, per automation, per 24 hours.
- If the creator enabled it, Pricify replies publicly (“Check your DMs”).
LINK please!
Check your DMs 📩
Pricify sends a private reply — with a follow check if the creator asked for one
Using the private-reply feature, Pricify sends the first message to the commenter. If “follow first” is on, this message asks them to follow the creator and tap I've followed. If it is off, the product link is sent right away. This uses instagram_business_manage_messages.
The follower confirms, Pricify checks, the link is delivered
When the follower taps I've followed or replies DONE, Pricify reads one field — whether this person follows the creator (is_user_follow_business) — and sends the product link if they do. If they do not, Pricify asks again politely. The result is used only for this decision and is not stored.
pricify.chat/caf…
Creator sees results, and can disconnect or delete their data
The dashboard shows how many comments matched, DMs were sent and links were clicked, plus a recent-activity list. Disconnect removes the token and stops all automations. Delete my Instagram data removes the connection, automations and activity. The same actions run if the creator removes Pricify inside Instagram (deauthorize callback).
Data we keep, and for how long
| Data | Why | Kept |
|---|---|---|
| Instagram user ID, username, account type, profile picture link | Show who is connected; route webhook events to the right creator | Until the creator disconnects or deletes |
| Access token | Call Instagram on the creator's behalf | Encrypted at rest; deleted on disconnect |
| Keyword rules and product links | What the creator set up | Until the creator deletes them |
| Activity log (commenter username, matched keyword text, result) | Show the creator what happened | 60 days |
| Follower follow status | One yes/no check before sending a link | Not stored |
We never sell Instagram data, never use it for advertising and never share it with third parties. Read the Privacy Policy and Terms.
URLs for the Meta app settings
| OAuth redirect URI | https://pricify.chat/ig/callback |
| Webhook callback URL | https://pricify.chat/instamine (fields: comments, messages) |
| Deauthorize callback URL | https://pricify.chat/ig/deauthorize |
| Data deletion request URL | https://pricify.chat/ig/data-deletion |
| Privacy Policy URL | https://pricify.chat/privacy-policy |
| Terms of Service URL | https://pricify.chat/terms |
| Reviewer start page | https://pricify.chat/ig/connect?client=web&intent=login |
For the reviewer: how to test in five minutes
- Open
pricify.chat/ig/connect?client=web&intent=loginand sign in with the Instagram tester account supplied with the submission (a professional account). - Allow the three permissions. You land on the dashboard with the account shown as connected.
- Choose New automation, pick a post, enter the keyword LINK, add any https product link, tick Ask the person to follow me first and save.
- From a second Instagram account (a tester), comment LINK on that post.
- The second account receives the follow message in Instagram DMs. Follow the first account, tap I've followed, and the product link arrives.
- Back on the dashboard, Activity shows each step. Use Disconnect to finish.
Questions from the review team: anilkumar@pricify.chat