Requested permissions
pages_show_list, pages_messaging, instagram_manage_messages, instagram_manage_comments.
Data use
Instagram username, comment, message/postback interaction, voucher claim status. Used only for campaign fulfillment and anti double-claim.
Safety scope
The app ignores unrelated DMs and comments outside the selected campaign post/reel.
How the campaign works
User comments
User voluntarily comments Mau Foto on the selected campaign post.
Public reply
The app replies: Cek DM ya kak 👋
DM instruction
The app sends follow instructions and the Udah Follow 🙌 button.
Confirmation
User clicks the button or confirms inside the campaign DM thread.
Voucher
If quota remains and the user has not claimed before, the app sends one voucher PNG.
Permission status checklist
| Permission | Purpose | Status |
|---|---|---|
| pages_show_list | Select/verify the Difotoinid Page | For review |
| instagram_manage_comments | Read campaign comments and send public reply | Working |
| pages_messaging | Send campaign DM instruction/voucher | Needs approval |
| instagram_manage_messages | Handle Instagram message/postback flow | Needs approval |
Admin-selected asset
Authorized Difotoin admin selects the Page and confirms the connected Instagram business account.
What the app does not do
It does not scrape followers, does not advertise to unrelated audiences, does not sell data, and does not auto-reply to normal customer service DMs outside the voucher flow.