Idukki
uIdukki essay · Idukki Strategy notebook

How to legally collect UGC from Instagram and TikTok

A repost is not permission. To use a customer’s photo or video on your store or in ads, you need a documented licence. Here is the practical workflow for collecting UGC from Instagram and TikTok the right way.

Rohin AggarwalRohin AggarwalCo-founder · Idukki.io·May 13, 2026 · updated May 25, 2026·7 minFrom the Idukki desk

The most common UGC mistake is also the most expensive: a brand finds a great customer post, reposts it to their own grid or drops it on the product page, and assumes that because the customer tagged them, it is fair game. It is not. The customer holds the copyright to their own photo or video. Using it without permission is infringement, and "but they tagged us" is not a defence.

Why a repost is not permission

Copyright sits with the creator the moment they press the shutter. A public post grants the platform certain rights, not you. Tagging your brand is an invitation to notice, not a transfer of usage rights. To put a customer’s content on your store, in an email, or in a paid ad, you need a licence: explicit permission, with terms, that you can produce later if asked.

The rights-request workflow

  1. 1Find the content, monitor tags, mentions and brand hashtags for posts worth using.
  2. 2Send a rights request: a direct message that names what you want to use it for (store, ads, email), and asks the creator to reply with a clear yes.
  3. 3Capture the grant: record the creator’s affirmative reply, the date, and the scope they agreed to. That record is your licence.
  4. 4Store it against the asset, keep the permission attached to the specific piece of content, so you can prove clearance for that exact photo or video.
  5. 5Respect the scope, if they agreed to "your website", do not silently move it into paid ads.

What counts as valid permission

  • It is explicit, an unambiguous yes, not silence or a thumbs-up emoji you are choosing to interpret generously.
  • It is scoped, it names where and how you may use the content.
  • It is recorded, you can produce it later, tied to the asset.
  • It is from the right person, the creator of the content, not someone who merely appears in it or shared it on.

Instagram and TikTok specifics

On Instagram, the practical channel is a DM rights request against tagged posts, Stories and Reels. On TikTok, the same principle holds for videos, and you should be doubly careful with sound, a clip can be visually cleared and still carry a music licence you do not have (covered in the full rights guide). On both platforms, screenshots and re-uploads strip context and quality; always work from the original where you can.

Sources & notes

  1. 1U.S. Copyright Office, copyright basics · Copyright vests in the creator of a work.
  2. 2Instagram & TikTok platform terms · Platform terms grant the platform a licence, not third-party brands. Always seek direct permission.
  • 30 days

    GDPR right-to-erasure SLA

    End-to-end inc. CDN purges

  • 45 days

    CCPA deletion SLA

    CPRA

  • 64%

    of brands fail withdrawal SLA on audit

    Idukki research Q1 2026

  • 38%

    Median rights yes-rate

    Idukki dataset

Compliance benchmarks across UGC programmes.
#ugc#rights-management#instagram#tiktok

Continue reading

1 piece in this cluster

These long-form pieces on the Idukki blog link back to this article, go deeper on the cluster.

More from Rohin Aggarwal

Where Idukki ships

Same data model. Every surface a shopper meets.

We use cookies

We use essential cookies to run this site and optional analytics cookies to understand how it’s used. You can change your choice anytime in our privacy policy.