# Is Comment-to-DM Allowed on Instagram? What Meta's Rules Say

> Yes, comment-to-DM is a supported Instagram feature. Here is what Meta's rules allow, the published limits, and how to set it up the right way.

By Megan Lamb · Published 2026-10-23

Source: https://www.planoly.com/blog/is-comment-to-dm-allowed-on-instagram

![An iPhone beside an "Instagram messaging basics" checklist: reply privately to commenters, one private reply per comment within 7 days, more messages once they reply, and Meta's official API.](https://planoly-prod.imgix.net/website/blog/authored/is-comment-to-dm-allowed-on-instagram/is-comment-to-dm-allowed-on-instagram-hero-8d77f4b4865c421c81b39aa07b966930c184f654abb8060b061f97e1c39c97ef.webp)

Yes. Meta's developer platform has a feature built for exactly this, called Private Replies, so comment-to-DM through an official API is a supported way to answer people who comment on your posts. Meta's rules are clear about how to do it well: reply to people who reached out first, keep volume reasonable, and use a tool that connects through Instagram's own permissions.

If you've wondered whether automation is "allowed," that's a smart question to ask before you set anything up. The good news is that Meta documents the rules in plain language. Here's what they say, and how to follow them.

## What Does Meta Allow?

Meta's [**Private Replies documentation**](https://developers.facebook.com/docs/instagram-platform/private-replies) describes exactly the comment-to-DM pattern. An app can send one private reply to a person who commented on your post or reel, within 7 days of the comment. After that: "Follow-up messages can only be sent if the recipient responds, and must be sent within 24 hours of the response."

In plain English:

- Someone comments. You can send them one DM.

- If they reply or tap a button, a conversation is open and you can send more.

- If they don't respond, you stop.

**Why it matters:** The system is built around consent, which protects everyone from unwanted messages. The person reached out first by commenting, and your reply answers their request.

## What Are the Limits?

Meta publishes a clear rate limit for this feature. Its [**Rate Limits page**](https://developers.facebook.com/docs/graph-api/overview/rate-limiting/) allows "750 calls per hour per Instagram professional account for private replies to comments on Instagram posts and reels."

Two other rules guide every official tool:

**1. Opt-in comes first.** Meta's [**Developer Policies**](https://developers.facebook.com/devpolicy/) say: "Don't contact people in Messenger or Instagram Messaging unless you... have obtained legally sufficient... opt-in."

**Why it works:** A comment with your keyword, a story reply or a DM is the person starting the conversation. That's the opt-in.

**2. Automated access needs permission.** Instagram's [**Terms of Use**](https://help.instagram.com/581066165581870) prohibit "accessing or collecting information in an automated way without our express permission." Tools using Meta's API work under Meta's Platform Terms, which is that permission.

**Why it works:** Connecting through Meta's API is how an approved integration works, and it keeps your account secure.

## What Are Meta's Policies Designed to Prevent?

Meta's policies are there to keep messaging free of spam. Its [**Developer Policies**](https://developers.facebook.com/devpolicy/) describe spam as including "behavior creating bots... at very high frequencies" and "failing to deliver promised experiences." ManyChat's help page gives its users similar guidance, recommending against "Too many automated messages too quickly" and "Aggressive public comment automation" ([**ManyChat**](https://help.manychat.com/hc/en-us/articles/18624810395932-Is-Manychat-officially-approved-by-Meta)).

In practice, here's what to avoid:

- **Cold DMs.** Messaging people who never commented, replied or messaged you.

- **Very high volume, very fast.** Thousands of identical messages in a short window.

- **Repetitive public replies.** The same public comment posted under every comment.

- **Bait and switch.** Promising a guide and sending something else, or nothing.

- **Password-based bots.** Tools that need your Instagram password instead of an official connection.

The rules are written down, which makes them easy to follow. Stay on the right side of each one and your automation is doing what Meta built Private Replies for.

## How Do Official-API Tools Differ From Bots?

A quick way to tell them apart:

| Official API tool                                             | Password-based bot                          |
| :------------------------------------------------------------ | :------------------------------------------ |
| Connects through Instagram's login and permission screens     | Asks for your Instagram password            |
| Replies only to people who commented, replied or messaged you | Can message anyone, including cold outreach |
| Works inside Meta's published limits                          | Ignores Meta's limits                       |
| Asks you to grant comment and DM permissions                  | Acts as you, invisibly                      |

Meta's official messaging rules keep it simple: you can DM people who contacted you first, and cold outreach isn't part of the API.

## How to Set Up Comment-to-DM the Right Way

**1. Only reply to people who asked.** Keyword comments, story replies and DMs. No follower blasts.

**Why it works:** It keeps you inside Meta's opt-in rule.

**2. Vary your public replies.** Rotate a few different replies instead of posting the same line hundreds of times.

**Why it works:** Varied replies read naturally to your audience and keep your comment section feeling human. If a post takes off, you can also switch public replies off and send the DM alone.

**3. Deliver what you promised.** If the caption says guide, send the guide.

**Why it works:** It builds trust with your audience and matches Meta's guidance on delivering promised experiences.

**4. Use a tool that connects through Instagram's permissions.** If a tool asks for your password, walk away.

**Why it works:** You stay inside Meta's Platform Terms, and your password stays private.

> **Pro tip**
>
> Planoly Automations uses Meta's official Instagram API and replies only to people who comment, reply to your story, or DM a keyword you chose. Its public reply rotates through three replies (up to 100 characters each), and you can switch public replies off to send the DM alone. Someone who comments three times still gets one DM. The [**Automations help article**](https://www.planoly.com/help/scheduling-and-publishing/automations?utm_source=planoly_blog\&utm_medium=blog_cta\&utm_campaign=is-comment-to-dm-allowed-on-instagram\&utm_content=pro_tip_link) covers each setting.

## Frequently Asked Questions

**Is ManyChat allowed on Instagram?**

Yes. ManyChat describes itself as an official Meta Business Partner, and its help page encourages users to stay within Instagram's limits. The same good habits apply to any tool: reply to people who opted in, and keep volume reasonable.

**Do I need special permission to automate DMs?**

You need a tool that uses Meta's API and asks you to grant comment and DM permissions when you connect. That connection is the permission Instagram's Terms of Use refer to.

**Is comment-to-DM allowed on Instagram?**

Yes. Meta's Private Replies feature exists for it: one private reply per comment within 7 days, and more messages only after the person responds.

**Can I auto DM new followers?**

Not through Meta's official messaging rules, which require the person to contact you first. Following you isn't a message.

## TL;DR

- Comment-to-DM through Meta's API is a supported feature.

- The limit is 750 private replies per hour per professional account.

- Meta's policies are designed to prevent cold DMs, spam-like volume, repetitive public replies and password bots.

- Reply only to people who asked, and deliver what you promised.

Have you been holding off on automations until you knew the rules? Which one will you set up first?
