Connecting your Instagram account is what lets you run Instagram automation or Copilot work for you: replying to comments, sending DMs and more. We know that handing access to your account is a big deal, so this article explains exactly how the connection works, and why it is safe.
We are an official Instagram partner
Our app has been reviewed and approved by Meta, and it is built entirely on Instagram's official tools, the same ones Meta provides to trusted businesses.
That approval is not a formality. To be allowed to connect to Instagram at all, an app has to meet Meta's platform policies and pass their review. Any new feature we add or improve must go through a new approval process, the latest being from May 2026.
What Meta's approval involves
What Meta's approval involves
Before an app can access Instagram accounts, Meta reviews how it works, what data it uses, and why. The app must request only the access it genuinely needs, handle your data responsibly, and follow Meta's platform policies on an ongoing basis. We are held to those standards continuously, not just once. If you ever want to read the rules for yourself, they are published openly by Meta.
How the connection works
When you connect Instagram, you are sent to Instagram's own login screen to approve the connection. This means:
You sign in with Instagram directly. Your password is never seen by or shared with us.
You choose to grant the access, and you can review what you are approving.
You can disconnect at any time, from your settings here or from your Instagram account settings.
Connecting requires an Instagram Business or Creator account, which is the account type Instagram allows apps like ours to work with.
The permissions we ask for, and why
When you connect, we ask for the permissions that power Copilot's Instagram features, and each one maps to something useful you get in return.
Basic account access: lets FanBase connect to your account and recognise your posts, comments and messages. This is the foundation everything else builds on.
Manage comments: lets FanBase read and reply to comments on your posts. This powers comment based automations, such as turning a comment into a DM, and the comment replies Copilot suggests.
Manage messages: lets FanBase read and send direct messages. This powers your DM automations, follow ups and the inbox.
Publish content: lets FanBase create and publish posts on your behalf, for when you approve a post idea and want it to go live.
By default, we ask for all the permissions FanBase needs. In practices, only the permissions required for the features you need are used. The rest simply sit unused.
You're always in control
Nothing happens on your account that you have not set up.
Your automations only ever run the way you configured them, within the rules and limits you set.
Copilot's suggestions, such as a recommended reply or a post idea, always wait for your approval before anything is posted.
You can pause an automation, or disconnect Instagram entirely, at any moment.
What FanBase will never (and can't)
What FanBase will never (and can't)
We will never post, comment or message in a way you have not set up, never use your access for anything beyond powering the features you have chosen, and never share your account access with anyone else. The permissions exist to run the features you switch on, nothing more. If you disconnect, that access ends.
Tl;dr
You are connecting to an app that Meta has reviewed and approved, through Instagram's own secure login. We only ever put to use what the features you switch on actually need, and you keep full control the whole way through. That is the foundation we build everything else on.