User-generated content can provide credible customer perspective, but public visibility does not automatically grant a brand permission to download, edit, advertise, sublicense, or republish it. A controlled workflow protects the contributor, the people shown, the brand, and the integrity of the final asset.
Discover content without assuming permission
Record the original URL, platform, creator handle, discovery date, asset description, people or locations shown, apparent product relationship, and the proposed brand use. Preserve the original context; a positive-looking image may accompany criticism, satire, a private story, or a sensitive event.
Check whether minors, private locations, personal information, third-party trademarks, music, artwork, bystanders, employees, or other rights holders appear. The person who posted an asset may not control every element in it.
Do not download or move content into production merely because it is public. Keep discovery separate from approved use.
Request clear and traceable permission
The permission request should identify the brand, exact asset, intended channels, organic or paid use, edits, duration, geography, compensation, attribution, sublicensing, storage, withdrawal process, and link to applicable terms. Use plain language appropriate to the audience and jurisdiction.
A vague hashtag reply may not provide sufficient evidence for broad use. Preserve the request, terms version, contributor response, account identity, timestamp, and any later clarification. Escalate ambiguous, conflicting, or high-value rights to qualified legal review.
If compensation, gifting, employment, affiliate relationships, contests, or another material connection exists, define required disclosures. Do not instruct contributors to hide or weaken a disclosure.
Review identity, privacy, treatment, and accessibility
Verify that the granting account plausibly controls the content and that consent covers identifiable people where required. Avoid collecting unnecessary personal information. Store evidence with restricted access and a retention rule.
Define permitted edits. Cropping, captions, translation, music replacement, color treatment, overlays, AI enhancement, synthetic extension, or combining the asset with new claims can materially change meaning. Approval should bind to the exact treatment and copy.
Add alt text, captions, transcripts, readable overlays, and other accessible treatment without misrepresenting the contributor. Confirm pronunciation and identity details when attribution is used.
Publish, monitor, and handle withdrawal
Before publishing, verify destination, account, approved version, permission scope, term, territory, disclosures, attribution, claims, product availability, rights evidence, accessibility, and live-page context. Record the live URL and publication date against the rights record.
Monitor comments and contributor feedback. Define how the team handles a withdrawal request, expired license, deleted original, account ownership dispute, discovered third-party rights, or changed safety context. Removal may need to propagate across scheduled variants, advertisements, landing pages, partner libraries, and archived campaigns.
Reuse requires a fresh scope check. Permission for one organic Instagram post does not automatically cover a paid advertisement, email, marketplace page, or future campaign.
UGC workflow checklist
- Original source, context, creator identity, people, and third-party elements recorded
- Proposed channels, edits, term, geography, compensation, and attribution specified
- Permission request, terms version, response, and timestamp preserved
- Material relationships and required disclosures documented
- Privacy, minors, bystanders, trademarks, music, and other rights reviewed
- Exact edited version, copy, accessibility, and claim treatment approved
- Live destinations and rights record remain linked
- Expiry, withdrawal, dispute, deletion, and reuse checks have owners
This workflow is operational guidance, not legal advice. Rights, privacy, advertising, employment, consumer-protection, and minor-consent requirements vary by jurisdiction and use.
