Trust and safety

Tem runs on Instagram's official API. This page lists exactly what that means, so you can check it rather than take our word for it.

What Tem asks Instagram for

Four permissions, shown on Instagram's own screen when you connect: instagram_business_basic (your username and media list), instagram_business_manage_comments (read comments, send one private reply per comment), instagram_business_manage_messages (continue the DM thread after the person replies), instagram_business_manage_insights (the follow check and reel stats). Tem never sees your password, and there is no permission that lets it post, follow, like, or message people who have not contacted you.

What Tem never does

• Cold-DM anyone. Every message is a reply to a comment or a message the person sent.
• Post, follow, unfollow, or like on your behalf.
• Send the same message to hundreds of people: replies are varied and rate-limited under Instagram's published limits.
• Sell or share your data. No ad networks, no data brokers, no "partners".

The follow gate is a real check

Before sending the link, Tem asks Instagram whether the commenter follows you (Meta's is_user_follow_business field). Most tools ask the person and take their word for it. If Instagram cannot answer, Tem sends the link anyway rather than leaving someone waiting.

What Tem stores

• Your Instagram username and user id, and an access token, encrypted at rest.
• Your automations (reel, keyword, reply text, link).
• For each automated reply: the commenter's username, the comment text, and delivery status. This is the log you see as Activity.
• Tracked link clicks with a hashed IP, device type and time. Never a name.
• Your email if you signed up with one, or a placeholder if you connected through Instagram.

Delete everything in one tap

Account, Delete my account and data. Or remove Tem under Instagram's Apps and websites. Either path erases the account, connection, automations, DM events and clicks immediately. How it works.

India's data protection law

Tem is preparing for the Digital Personal Data Protection Rules timeline (consent framework from November 2026, full obligations from May 2027): plain-language notice, one-tap erasure, no sale of data, and a named contact for requests at privacy@tem.app.

Security

All traffic is HTTPS. Pages run under a strict Content Security Policy with Trusted Types. Report a vulnerability via security.txt.

Instagram-only, by design

Instagram DMs carry no per-message fee from Meta, and Tem never adds one. The price does not move with volume, on any plan. Full terms: Terms and Privacy.