Security and safe automation.

You are trusting us with the account your business runs on. Here is exactly how Checkout DM connects to it, what it can and cannot do, and how you stay in control.

How connecting works

Checkout DM uses Instagram Business Login, Meta’s official OAuth sign-in. It is the same “log in with” pattern you use across the web, so a tool never needs your password.

  1. Step 1

    You tap Connect Instagram

    You start the connection from your Checkout DM dashboard.

  2. Step 2

    You approve on Instagram

    Instagram shows its own permission screen. You sign in with Instagram, never on our site.

  3. Step 3

    Instagram issues an access token

    We receive a limited access token. We never receive your password.

  4. Step 4

    You can revoke it any time

    Remove Checkout DM from your Instagram connected apps and our access ends immediately.

What Checkout DM can do

  • Read and send DMs in conversations with your customers
  • Read comments and reply to them for comment-to-DM
  • Read basic details of your business account

What we never get

  • Your Instagram password
  • The ability to post content, follow accounts or edit your profile
  • Your customers' card details. Payments use secure payment links and we never store card numbers

The permissions we use

Checkout DM uses three Instagram permissions, and all three have been approved through Meta’s App Review. We do not request anything beyond what the features need.

PermissionWhat it allowsWhy we need it
instagram_business_basicRead basic details of your business account.To identify your shop and show your name and profile picture in the dashboard.
instagram_business_manage_messagesRead and send messages in conversations with your customers.To run your DM checkout.
instagram_business_manage_commentsRead and reply to comments on your posts and Reels.To power comment-to-DM automation.

Staying inside Instagram’s rules

  • We use only Instagram’s official platform. No scraping, no password automation, no browser bots.
  • Conversations start with the customer: a message, a comment or a Story reply.
  • We respect Instagram’s 24-hour messaging window and do not message outside it.

You stay in control

  • Remove access any time from your Instagram connected apps. This immediately revokes our access token.
  • Reconnect later and your catalog, orders and settings are still there.
  • Ask for your data to be deleted. See Data Deletion.

Payments and data

  • Payments go directly to your own account. Checkout DM does not hold your money.
  • Customer card details are never stored by us.
  • Credentials are stored encrypted, and our site is served over HTTPS.

What we will not promise

No tool can honestly promise that an Instagram account will never be restricted. Instagram sets its own policies and sending limits, and we cannot override them. What we can promise is how we work: official, permission-based access only, no password ever, and a design built around Instagram’s rules. And like every online service, no system is 100% secure, so we keep our safeguards under review.

Questions about security? [email protected] · Privacy Policy

🍪We use cookies to run your dashboard and, if you allow it, to improve CheckoutDM. Privacy Policy