Instagram API Permissions Usage

KollabKey is a creator ↔ brand campaign analytics platform. Creators connect their Instagram Professional account so brands they collaborate with can automatically see performance for the sponsored posts, reels, and stories they produce.

Permissions requested

instagram_business_basic

Used to read the connected Professional account's identity and media list so posts/reels/stories appear in the creator's KollabKey library and can be attached to brand campaigns.

• GET /me — fields: id, username, account_type, profile_picture_url. Used to confirm the connected account and display the handle in the dashboard.
• GET /{ig-user-id}/media — fields: id, caption, media_type, media_product_type, media_url, thumbnail_url, permalink, timestamp, username, owner, is_shared_to_feed, collaborators. Used to populate the creator's content library and match posts to brand campaigns.
• GET /{ig-user-id}/stories — same fields. Used to capture story metadata before it expires.

instagram_business_manage_insights

Used to retrieve performance metrics for the creator's own media so brands can measure ROI on sponsored content.

• GET /{media-id}/insights for posts and reels — metrics: views, reach, likes, comments, shares, saved, total_interactions.
• GET /{media-id}/insights for stories — metrics: views, reach, replies, navigation.

Data handling

• Media and metric snapshots are stored in content_postsand content_metrics tables owned by the creator.
• Data is refreshed on user-initiated sync from the dashboard and by a scheduled server-side cron.
• KollabKey never posts, comments, messages, or moderates on the user's behalf. It is strictly read-only.
• Users can disconnect Instagram at any time from their dashboard, which clears the stored access token and account link.
• Meta deauthorization and data-deletion callbacks are honored at /api/public/instagram/deauthorize and /api/public/instagram/data-deletion.

Reviewer test walkthrough

1. Visit /auth and create a test account.
2. Complete onboarding and choose the Creator role.
3. From the creator dashboard, click Connect Instagram and complete the Instagram Login flow with a Professional account.
4. Click Sync now. Posts, reels, and stories from the connected account appear in the library with metrics populated from the Insights API.
5. Click Disconnect to revoke the connection.

Policies

See our Privacy Policy, Terms of Service, and Data Deletion Status pages.