How to legally collect UGC from Instagram and TikTok
A repost is not permission. To use a customer’s photo or video on your store or in ads, you need a documented licence. Here is the practical workflow for collecting UGC from Instagram and TikTok the right way.
The most common UGC mistake is also the most expensive: a brand finds a great customer post, reposts it to their own grid or drops it on the product page, and assumes that because the customer tagged them, it is fair game. It is not. The customer holds the copyright to their own photo or video. Using it without permission is infringement, and "but they tagged us" is not a defence.
Why a repost is not permission
Copyright sits with the creator the moment they press the shutter. A public post grants the platform certain rights, not you. Tagging your brand is an invitation to notice, not a transfer of usage rights. To put a customer’s content on your store, in an email, or in a paid ad, you need a licence: explicit permission, with terms, that you can produce later if asked.
The rights-request workflow
- 1Find the content, monitor tags, mentions and brand hashtags for posts worth using.
- 2Send a rights request: a direct message that names what you want to use it for (store, ads, email), and asks the creator to reply with a clear yes.
- 3Capture the grant: record the creator’s affirmative reply, the date, and the scope they agreed to. That record is your licence.
- 4Store it against the asset, keep the permission attached to the specific piece of content, so you can prove clearance for that exact photo or video.
- 5Respect the scope, if they agreed to "your website", do not silently move it into paid ads.
What counts as valid permission
- It is explicit, an unambiguous yes, not silence or a thumbs-up emoji you are choosing to interpret generously.
- It is scoped, it names where and how you may use the content.
- It is recorded, you can produce it later, tied to the asset.
- It is from the right person, the creator of the content, not someone who merely appears in it or shared it on.
Instagram and TikTok specifics
On Instagram, the practical channel is a DM rights request against tagged posts, Stories and Reels. On TikTok, the same principle holds for videos, and you should be doubly careful with sound, a clip can be visually cleared and still carry a music licence you do not have (covered in the full rights guide). On both platforms, screenshots and re-uploads strip context and quality; always work from the original where you can.
Sources & notes
- 1U.S. Copyright Office, copyright basics · Copyright vests in the creator of a work.
- 2Instagram & TikTok platform terms · Platform terms grant the platform a licence, not third-party brands. Always seek direct permission.
30 days
GDPR right-to-erasure SLA
End-to-end inc. CDN purges
45 days
CCPA deletion SLA
CPRA
64%
of brands fail withdrawal SLA on audit
Idukki research Q1 2026
38%
Median rights yes-rate
Idukki dataset
Continue reading
1 piece in this clusterThese long-form pieces on the Idukki blog link back to this article, go deeper on the cluster.
More from Rohin Aggarwal
- Conversational commerce
Why we built the Conversational PDP
Most product-page exits are a single unanswered question. Here is the case for answering it on the page, from your own evidence, and the story of why we built a Q&A that is curated-first and AI-second.
- Strategy
PDP before and after UGC: what actually changes on the page
Strip a product page back to brand-only content, then layer verified customer photos, video and reviews into the middle scroll, and watch what moves. A scroll-by-scroll look at the before and after, the numbers the public studies actually support, and where "just add UGC" gets oversold.
- Industry playbook
How to vet a creator: audience authenticity, engagement, and the fake-follower problem
On a typical account, roughly a fifth of followers are fake or inactive. Here is how to read the signals that separate a real audience from an inflated one, before you pay, with the four checks that catch most of it.