Why we ask for Instagram access
So we can publish the campaigns you commit to — through Meta's official API, never by logging into your account. Here's the architecture, plainly.
§IV · Connecting Instagram
When you accept a campaign, we publish the post through Meta's official Instagram Graph API — under the authorization you grant on Meta's own consent screen. We never log in to your Instagram. We don't have your password. The whole architecture is designed so that sentence is a fact, not a promise.
What "granting access" actually means
- 01You tap "Connect Instagram" on your Nexus Club dashboard
- 02Meta's own screen appears — Meta's surface, Meta's wording, Meta's checkbox
- 03You approve the named permissions (we list them in another article)
- 04Meta returns a long-lived access token to our app
- 05We encrypt that token and store it
- 06When a campaign you signed runs, we use the token to call Meta's API on your behalf — the same way Meta's official partners do
What this isn't
It is not a password share. It is not a session login. It is not us "acting as you" in your Instagram app. The token is scoped to publishing campaign posts, moderating comments on those posts, and reading your basic profile info — and nothing else.