# How to Repost Customer Content on Instagram (Legally) Reposting a customer's photo without permission is copyright infringement, tag or no tag. The clean permission flow, what counts as consent, and how to do it at scale. By Rohin Aggarwal · 2026-07-06 A customer tags your brand in a great photo. Screenshotting it and posting it to your feed feels harmless, customary, even flattering to them. It is also copyright infringement in most of the world, and brands get letters about it. The good news: doing it properly costs one comment and thirty seconds. Here is the legal shape of reposting, the permission flow that keeps you clean, and how to run it at the scale of hundreds of posts. **The rules in brief** - **The creator owns the photo.** Tagging you, using your hashtag or buying your product transfers nothing. - **Platform reshares are the safe lane:** Instagram's own Story-reshare and collab features operate inside its terms; a screenshot repost does not. - **Feed reposts and ads need explicit permission**, and ads need it in writing with scope. - **Keep the receipt.** Consent you cannot produce later functionally does not exist. ## Who owns what (the two-minute version) Copyright vests in the person who takes the photo or films the video, automatically, at the moment of creation. Your hashtag in their caption is not a licence; a tag of your account is not a licence; Instagram's terms grant Instagram a licence to display the content, not you. The myths to unlearn: "credit in the caption" is not permission (it is attribution attached to an infringement), "everyone reposts" is not a defence, and deleting-when-asked does not erase what came before it. The full legal framework, including music-licence traps on video, is in [the UGC rights and permissions guide](/blog/ugc-rights-and-permissions-guide). ## The safe lanes Instagram gives you When a customer tags your account in a Story, Instagram offers "Add to your story": that reshare lives inside the platform's own terms, keeps the creator's handle attached, and expires with the Story. Collab posts and remixes are similarly native. These are the low-ceremony options, and for ephemeral thank-you content they are usually enough. What they never cover: pulling the media out of Instagram, feed reposts of someone's post via screenshot or downloader, and any use in paid ads or on your website. ## The permission flow for everything else The industry-standard flow is a public comment or DM asking for rights with a clear yes-mechanism: "We love this! Can we share it on our channels? Reply #yesYourBrand to say yes to our terms: link." The reply is your consent event. Three elements make it hold up. Specificity: say where you will use it (social, website, ads); consent for one is not consent for all. A linked terms page: what they are agreeing to, in plain words. The record: who agreed, to what, when, with a link to the original post. For paid ads, raise the bar: written permission naming ad usage, ideally with a duration. Ad platforms can demand proof of rights, and creators reasonably expect ad usage to be paid; a surprise appearance in an ad campaign is how goodwill becomes a dispute. ## Running it at scale The flow above is fine for five posts a month and unmanageable at fifty. This is the part Idukki automates: it finds the posts that tag or mention you, sends the rights request as a comment on the original, detects the creator's approval, and logs the consent (who, what scope, when, which post) against the asset. Approved content flows into your [website galleries](/blog/embed-instagram-feed-on-website) and campaigns with the audit trail attached, and un-approved content simply never surfaces. Moderation sits in the same pipeline ([how the filter works](/blog/ugc-moderation-best-practices)), so scale does not mean risk. One more etiquette rule that doubles as strategy: always keep the creator's handle visible, and tell them where their content went. Creators whose content you treat well post about you again, and some become the repeat contributors a [customer creator program](/blog/turn-customers-into-a-creator-program) is built from. **The 30-second rule:** If pulling content off Instagram, ask first, be specific about where it will run, and keep the receipt. One comment and a logged yes is the entire cost of doing this properly; a takedown letter, a platform strike or a burned superfan is the cost of not. ### Sources - [Idukki: UGC rights and permissions guide](https://idukki.io/blog/ugc-rights-and-permissions-guide) — The legal framework this article summarises - [Instagram terms of use](https://help.instagram.com/581066165581870) — Licence granted to the platform, not to third parties --- Canonical: https://idukki.io/blog/how-to-repost-ugc-on-instagram Tags: Instagram, UGC rights, Repost, Compliance