1. What we build on Meta’s platform
Oye Creators is an intent-based creator marketing platform. Creators connect their Instagram professional account to (a) verify that they own the account, (b) share profile and performance information that brands use to match campaigns, (c) take part in campaign matching, including through Meta’s creator-marketplace tools where available, and (d) optionally switch on Auto-DM, a value-add feature in the creator app that sends automated replies on the creator’s own account using Meta’s messaging capabilities.
We support two ways of connecting, and a creator uses one of them:
- Instagram API with Instagram Login — the creator logs in with their Instagram professional account directly.
- Facebook Login for Business — the creator logs in with Facebook and selects the Facebook Page linked to their Instagram professional account.
2. Permissions we request and why
The exact permission names depend on which login the creator uses. Each permission is requested only when the creator enables the feature that needs it, and can be declined.
| Feature | Instagram Login | Facebook Login for Business | Why we need it |
|---|---|---|---|
| Account verification & profile | instagram_business_basic | instagram_basic, pages_show_list | Confirm the creator owns the account; show username, profile picture, follower count and recent media in their Oye profile. |
| Performance for campaign matching | instagram_business_manage_insights | instagram_manage_insights, pages_read_engagement | Read reach, impressions and audience metrics so brands can state an intent and be matched to creators with the right audience. |
| Auto-DM: reply to messages | instagram_business_manage_messages | instagram_manage_messages, pages_manage_metadata | Receive message and story-reply events on the creator’s account and send the creator’s configured automated replies. |
| Auto-DM: reply to comments | instagram_business_manage_comments | instagram_manage_comments | Detect comments containing the creator’s chosen keywords and send the reply the creator set up. |
| Creator-marketplace matching | — | business_management (where required) | Support campaign matching and partnership workflows in Meta’s business tools. |
We do not request permissions to publish content on the creator’s behalf, to manage their ads, or to access Facebook friends or personal profile data.
3. Auto-DM: what it does
Auto-DM is optional and off by default. When a creator switches it on in the Oye Creators app, it can do exactly three things, each configured by the creator:
- Keyword comment-to-DM. When someone comments on the creator’s post with a keyword the creator has chosen (for example “LINK”), the app sends that person the creator’s pre-written reply as a direct message.
- Auto-reply to incoming messages. When someone sends the creator a direct message, the app can send a first response or a keyword-matched answer the creator has written.
- Story-reply and mention responses. When someone replies to the creator’s story or mentions the creator in a story, the app can send the creator’s configured reply.
Auto-DM does not send messages to people who have not first interacted with the creator, does not send bulk or unsolicited messages, does not use purchased lists, and does not message on behalf of brands. Brand campaigns run through the creator’s own posts, not through Auto-DM.
4. Messaging rules we follow
- Replies are sent only in response to a user action (a comment, message, story reply or mention) and within the messaging windows Meta’s platform allows.
- Automated replies are identified as automated, and the creator can take over any conversation from the Instagram app at any time.
- Recipients can stop automated replies with a stop keyword, and the creator can pause or disable Auto-DM instantly.
- Rate limits set by the platform are respected; we do not attempt to circumvent them.
- Content must follow Instagram’s Community Guidelines and our Creators Agreement: no spam, no misleading claims, no harassment, no prohibited categories.
5. Data we store and for how long
- Access tokens are stored encrypted and used only to call the permissions above. They are deleted when the creator disconnects or removes the app.
- Profile and insights data is stored while the account is connected and refreshed periodically; it is deleted on disconnection as described on the Data Deletion page.
- Message, comment and reply events needed for Auto-DM are kept only as long as necessary to deliver replies and show the creator a log, then deleted per our Data Retention Policy.
- Sub-processors that help us run the service are listed on the Vendors page.
6. How creators stay in control
- Turn Auto-DM on or off, edit keywords and replies, or pause everything from the app at any time.
- Disconnect Instagram or Facebook from the app’s settings.
- Remove Oye Creators from Instagram’s or Facebook’s connected apps settings; Meta notifies us and we delete the associated data.
- Request deletion of all Meta-derived data using the steps on the Data Deletion page.
7. Security
Tokens and platform data are protected as described in our Security Policy: encryption in transit and at rest, access restricted to systems that need it, logging and monitoring. We report incidents affecting platform data as Meta’s terms require.
8. Changes and contact
We update this page when we add or remove a feature or permission. Questions or requests about Meta platform data: Support@ttlmedia.in, or use the grievance process. Official Meta documentation: Platform Terms, Developer Policies, Instagram Platform documentation.