Instagram comment-to-DM rules: the 7-day window, one private reply, and why automations fail

Meta's rules at a glance

These limits come from Meta's developer documentation for the Instagram API, the only official way to automate replies. The table follows Meta's own pages, linked under Sources.

Rule 1: one private reply, within 7 days

A private reply is the DM a business sends because someone commented. Meta allows one per comment, within 7 days of the comment, on posts, Reels, stories and ads (on Live, only during the broadcast). It includes a link back to the post the person commented on.

So never spend it on "Hi! 👋": a link sent as a second message has no permission to go out. ChattyFlow sends your text and link button together as one message, within seconds of the comment, because Meta notifies it straight away. Every few minutes it also re-checks active posts for missed comments up to 6 days old; older ones are left alone, since Meta would refuse the reply.

Rule 2: after a reply, 24 hours to keep talking

Meta's Instagram Messaging page says the conversation can continue only once the person responds to the private reply, and then within the 24-hour messaging window, counted from their latest message. That is why good flows end the first message with a question or buttons: the answer is what makes the next message possible. A drip of reminders to someone who never answered cannot go through the official API.

Human replies and bot disclosure

Meta's messaging policy adds a Human Agent tag: someone on your team can answer a message manually for up to 7 days, say on Monday for a Friday-night question. It is not for automated messages, and Meta warns that using tags outside their approved purpose can restrict an account's messaging.

The same policy says that where the law requires it, an automated chat must say so: at the start, after a long gap, and when a person hands over to automation. Meta names California and Germany and recommends it everywhere. One line does it: "Automatic reply from [your brand]".

Troubleshooting: symptom, cause, fix

Causes that mention ChattyFlow describe how it behaves; the rest apply to any tool built on Meta's API.

How ChattyFlow matches keywords

Matching is exact, whole-word and case-insensitive: GUIDE, guide and Guide all trigger GUIDE, but "guides" doesn't. ChattyFlow first strips the invisible direction marks phones add to Arabic text, the tatweel (ســعر counts as سعر) and extra spaces. Emoji keywords such as 🔥 match anywhere in the comment.

It doesn't guess variants. An accent (réservation, reservation), a plural (price, prices), another Arabic spelling (أريد, اريد), a prefix (سعر inside السعر or بالسعر) and Arabizi (bkam for بكام) all count as different words.

• List the variants in one field, separated by commas; the Arabic comma works too: سعر، السعر، بكم، بكام، price, prix.
• For a post meant to collect any question, turn on "No keyword — any comment triggers it" instead.

Will auto-replying get my Instagram account banned?

No one can promise an account will never be restricted: Meta decides. But replying to commenters through Meta's official API, within these rules, is what Meta built private replies for, and it can't become cold messaging: the API only lets a business write to someone who commented or wrote first.

What does get accounts restricted, according to Meta's and Instagram's own texts:

• Unofficial tools that use your password or drive the app. Instagram's Terms of Use forbid automated access or collection without Instagram's permission.
• Bulk or cold DMs. They need tools outside the official API, and Meta's spam standard bans posting or engaging at very high frequencies, manually or automatically.
• Repetitive messages. The same standard allows restrictions at lower volumes when there are other spam signals, such as repeated content.

One message, everything in it

Your text and link button go out together as the one private reply Meta allows.

Official API, paced and capped

Every send is paced, capped per hour and per day, and paused when Meta pushes back.

Keywords in Arabic, French and English

Whole-word matching that ignores case, tatweel and invisible marks; add variants with a Latin or Arabic comma.

How many DMs can I send someone who comments on my Instagram post?

One private reply per comment, within 7 days. A second message needs their reply, and must go out within 24 hours of it.

Why did my automated DM go to message requests?

Meta puts a private reply in Requests when the person doesn't follow you; followers get it in their Inbox.

Can I DM people who commented weeks ago?

Not as a private reply: Meta's limit is 7 days. Reply publicly and invite them to message you.

Do I need a Business account for comment-to-DM?

A Professional account, Business or Creator: Meta's messaging API doesn't work with personal accounts. Switching is free.

Do I have to say the replies are automated?

Where the law requires it, yes. Meta names California and Germany, and recommends it everywhere.

Will auto-replying get my Instagram account banned?

Replying to commenters through Meta's official API, within these rules, is how Meta intends automation to work. Accounts get restricted for unofficial tools, bulk or cold DMs and repetitive spam. No tool can guarantee Meta won't act.