Yes. Waveloop runs on Instagram's official API, and we're an Official Meta Business Partner and an Official Meta Tech Provider. Everything goes through that official connection.
How Waveloop protects your account
- You log in with Instagram. Waveloop never sees or stores your password.
- It only replies. Waveloop messages people who commented, replied to your story or sent you a DM. It doesn't message strangers.
- It follows Instagram's rules. A comment can get a private reply within 7 days. A DM conversation can be answered for 24 hours after the person's last message.
- One DM per comment. Each comment is answered once, even if Instagram tells us about it twice.
- It backs off. If Instagram turns a message away because it's busy, Waveloop retries later. If Instagram warns your account, Waveloop pauses those retries.
- You stay in control. Disconnect anytime from Connections.
What you can do
Instagram decides when to limit an account, and no tool can promise it never will. These habits help:
- Send what people asked for. Keep the DM about the keyword they commented.
- Put your link in the button, not in the message text.
- Write a few versions of your message. In Setup Message, click Add another version, and Waveloop picks one for each DM so they don't all look the same.
Want to know exactly what Waveloop can access? See Waveloop asks for permissions. Is that safe?