The complete UGC rights and permissions guide
The customer who shot a photo owns its copyright, not you and not the platform. What a usage licence must cover, plus the music, disclosure and deleted-post traps.
The phrase 'usage rights' bundles a dozen separate operational commitments, and most brand teams have already agreed to all of them in vendor contracts they have never re-read. The guide below walks through who actually owns a customer photo, what a licence has to cover, and the edge cases (music, bystanders, deleted posts) that quietly turn a content win into legal exposure.
In this article
Keep this open while you build a UGC programme. It is practical guidance, not legal advice. For anything high-stakes, run it past a lawyer in your market. What it does cover is the set of questions that come up again and again once real customer content starts flowing. If your programme starts from a campaign, pair this with how to run a UGC competition, where the rights step is built into the entry mechanic.
Who owns a customer photo?
Copyright vests in the creator the moment the shutter fires. The customer who took the photo owns it. Your brand appearing in it, or being tagged in it, changes nothing. The platform’s terms grant the platform a licence, not you. To use the content yourself, you need permission from the creator. Full stop.
What should a usage licence cover?
- Scope of use: organic social, your website, email, paid advertising. Paid ads are the scope creators most often have not agreed to.
- Channels and surfaces, be specific; "marketing" is too vague to rely on.
- Duration, perpetual, or a fixed term. If unstated, do not assume perpetual.
- Edits: may you crop, trim, add captions or overlay product tags?
- Attribution, whether and how you credit the creator.
- A record: the request, the affirmative reply, the date, tied to the specific asset.
| Licence term | What it covers | Default if left unstated |
|---|---|---|
| Scope of use | Organic social, website, email, paid ads. | Assume organic + website only; paid ads is NOT granted. |
| Channels / surfaces | The specific places the content can appear. | "Marketing" is too vague to rely on; treat as unspecified. |
| Duration | Perpetual or a fixed term. | Do not assume perpetual; treat as short-term. |
| Edit rights | Crop, trim, caption, overlay product tags. | Assume no edits beyond what was shown when consent was given. |
| Attribution | Whether and how the creator is credited. | Credit the creator unless they ask otherwise. |
Disclosure: FTC, ASA and incentivised content
Genuine, unsolicited customer content carries no disclosure obligation. The moment content is incentivised (gifted product, a discount, a competition entry, any paid relationship) disclosure rules apply. In the US that is the FTC; in the UK, the ASA and CMA. The duty is shared: the creator should disclose, and the brand should not publish incentivised content dressed up as spontaneous.
Music and third-party content
A customer video can be perfectly cleared for the visuals and still carry a music track you have no licence for. The licence the customer (or the platform) holds for posting on TikTok or Instagram does not extend to your website or your ads. When in doubt, use content where the audio is the creator’s own, or replace the audio with a track you have licensed.
Edge cases: bystanders and deleted posts
Two more catch brands out. An identifiable person who is not the creator (a friend in the shot) can hold their own rights, especially in stricter jurisdictions, so favour content where everyone visible is the creator or has consented. The other trap: if a creator deletes the original post, your licence to the copy you cleared still stands, but only if you kept your own copy of the asset and the permission record. Relying on a live link to the original is fragile.
Sources & notes
- 1U.S. Copyright Office · Copyright ownership basics.
- 2FTC, Endorsement Guides · US disclosure rules for incentivised content.
- 3UK ASA / CMA, influencer and endorsement guidance · UK disclosure rules.
- 4Note · This article is practical guidance, not legal advice. Confirm specifics with a qualified lawyer in your market.
0 days
GDPR right-to-erasure SLA
End-to-end inc. CDN purges
0 days
CCPA deletion SLA
CPRA
0%
of brands fail withdrawal SLA on audit
Idukki research Q1 2026
0%
Median rights yes-rate
Idukki dataset
Continue reading
8 pieces in this clusterThese long-form pieces on the Idukki blog link back to this article, go deeper on the cluster.
- Strategy
The EU AI Act and synthetic product video: who has to label AI-generated content, and when
If you ship AI-generated or AI-manipulated product video and imagery into the EU, the AI Act's transparency rules can require a machine-readable disclosure label. Here is who it applies to, what a compliant label looks like, and a practical checklist.
- AI search
The State of UGC & AI Commerce 2026
Our annual report on how AI engines reshaped product discovery, why user-generated content became the evidence layer agents quote, and the seven plays that separate leaders from laggards going into 2027.
- Strategy
Syndicating UGC to Google Shopping & Meta Catalog Ads
Your product feed already carries titles and prices. Add verified ratings and customer photos to it and the same Shopping and catalog ads earn more clicks at the same spend.
- AI search
AEO for Reviews: Getting Your Ratings Quoted by AI Agents
AI agents quote a star rating when it is backed by verified, machine-readable review evidence. Mark up real reviews with Review and AggregateRating schema, surface photo and video proof to crawlers, and never pad the count.
- Industry playbook
Seasonal UGC Playbooks: Valentine's, Mother's Day & Back-to-School
The quieter retail peaks (Valentine's, Mother's Day, Back-to-School) convert as well as BFCM when you collect customer content ahead of them. Here is a 6-week pre-season calendar and the rights-at-entry mechanics that make it repeatable.
- AI search
Build an AI-Curated, Self-Updating UGC Gallery
An AI-curated gallery scores incoming customer content for quality and brand safety, then publishes only what clears the bar and quietly refreshes itself. Here is how the ingest-to-publish loop works, and where a human still belongs in it.
- Strategy
How Much Does UGC / Shoppable-Video Software Cost? A Real Pricing Breakdown
UGC and shoppable-video tools usually price one of three ways (per-impression, per-seat, or per-MAU), which is why two quotes for "the same thing" can differ 10x. Here is how each model behaves as you scale, with worked examples at 30k, 100k, and 500k sessions.
- Strategy
Migrating from Loox / Stamped / Foursixty to Idukki, Hour by Hour
Switching UGC and reviews tools is a one-day job, not a one-month project. Here is the hour-by-hour migration log, a clear table of what transfers versus what gets rebuilt, and the first-week checklist that keeps your galleries live.
More from Rohin Aggarwal
- Industry playbook
How to run a UGC competition that fills your gallery, online and in-store
A prize plus a deadline plus a clear ask turns a trickle of UGC into a stream. The runbook: five formats, a schedule, copy templates.
- Conversational commerce
Why we built the Conversational PDP
A Conversational PDP answers the silent question that drives most product-page exits: curated Q&A first for the common doubts, an AI concierge scoped to your own data second.
- Strategy
PDP before and after UGC: what actually changes on the page
Add verified customer photos, video and reviews to the middle scroll of a brand-only PDP and conversion lifts. Here is what moves, scroll by scroll, and where "just add UGC" gets oversold.