Quick answer: An Instagram chatbot can answer UAE customers’ DMs in Arabic and English, but Meta only lets a bot reply after the customer messages, comments or clicks first, inside a 24-hour window. Start with price, hours and bookings, hand over to a person on complaints, and ask for consent before saving contact details.
A customer watches your reel, comments “price?”, and expects an answer in their DMs within minutes, in Arabic or English, at eleven at night. Most UAE retailers, clinics, restaurants and property agencies still answer those messages by hand from one phone, and lose the ones that arrive after hours. Instagram and Messenger chatbots close that gap, but Meta sets tight rules on when and how a bot may message people. This guide explains what the Messenger Platform and the Instagram Messaging API allow in 2026, how comment-to-DM automation works, how a bot hands a chat to your team, what to automate first and how to tell whether it’s working.
Source: DataReportal, Digital 2026: The United Arab Emirates (ad reach figures from late 2025)
These are Meta’s advertising audience figures, not counts of your customers, but the point stands: almost everyone you sell to in the UAE is reachable on Facebook or Instagram, and every post invites a reply. The question is whether anyone answers in time.
What Meta allows an Instagram chatbot and a Messenger bot to do in 2026
Both channels run on one policy framework. Facebook Pages use the Messenger Platform; Instagram professional accounts use the Instagram Messaging API. A bot on either channel can only respond: the customer must act first by sending a message, tapping a call-to-action button, clicking a Click-to-Messenger ad or reacting to a message. That opens a 24-hour standard messaging window in which your replies may include promotional content.
Sources: Meta for Developers, Messenger Platform policy overview · Meta, Messenger Platform and IG Messaging API policy
Outside that window the rules tightened this year. Meta deprecated the CONFIRMED_EVENT_UPDATE, ACCOUNT_UPDATE and POST_PURCHASE_UPDATE message tags; since 27 April 2026, any request that uses them fails with error code 100. The replacements are utility message templates for orders, account updates and appointments, or the Marketing Messages API for promotions. Recurring notifications were switched off on 10 February 2026 everywhere except Australia, the EU, Japan, South Korea and the UK, so they aren’t an option for UAE pages.
Sources: Meta for Developers, Messenger Platform changelog · Meta, send messages and utility messages · Manychat, Meta’s deprecation of message tags
One tag survives. The human agent tag lets a business representative reply manually within seven days, for issues that can’t be closed inside 24 hours. It requires App Review, tagged messages must be non-promotional, and it’s for people, not bots.
Sources: Meta, send messages (human agent tag) · Meta, Messenger Platform and IG Messaging API policy
| Feature | What Meta allows | What it does not allow |
|---|---|---|
| Standard messaging window | Any reply, including offers, within 24 hours of the customer’s last action | Starting a conversation with someone who has not messaged, commented or clicked first |
| Human agent tag | Manual replies from a person for up to seven days, after App Review | Automated or promotional messages sent under the tag |
| Old update tags | Nothing; move to utility message templates | Event, account and post-purchase tags, which fail since 27 April 2026 |
| Private replies | One private message to a commenter within seven days of the comment | A second message unless the person replies; then only within 24 hours |
| Instagram extras | Ice breakers, quick replies, persistent menu, private replies | Marketing messages, one-time notifications and sponsored messages |
| Bot responsiveness | Fully automated, manual or hybrid set-ups | An automated bot that leaves input unanswered for more than 30 seconds |
Sources: Meta, Messenger Platform policy overview · Meta, send messages · Meta, private replies on Messenger · Meta, changelog
Two practical limits catch UAE teams out. Instagram text messages must be 1,000 bytes or less, and Arabic letters take two bytes each in standard UTF-8 encoding, so an Arabic reply reaches the limit at roughly half the length of an English one. And Facebook and Instagram are separate doors: a person logged in to Facebook can’t message your Instagram account through the Messenger Platform, and the reverse is also true, so you’re running two inboxes even under one brand.
Sources: Meta, Instagram Messaging API · Meta, Messenger Platform overview
Comment-to-DM: turning “price?” comments into conversations
Comment-to-DM automation is built on private replies. When someone comments on a Facebook post or an Instagram post or reel, your app can send that person one private message within seven days of the comment. On Instagram the message includes a link to the post they commented on. If they reply, the normal 24-hour window opens and the bot can carry on; if they don’t, you can’t send a second message.
Sources: Meta, Instagram private replies · Meta, Messenger private replies
On Instagram Live, private replies can only be sent while the broadcast is running. The app also needs comment permissions and webhooks subscribed to comments and live comments, which is why comment automation runs through a developer app or an inbox tool.
Source: Meta, Instagram private replies
Because you get exactly one message, it has to earn a reply. Don’t paste a price list and a link. Ask one question with two or three quick-reply buttons (“Which size?”, “Viewing this week or next?”), because a tap reopens the window. Add a short public reply under the comment so other viewers see that you answer.
Because you get exactly one message, it has to earn a reply.
Ice breakers, menus and the first thirty seconds
Before a customer types anything, Instagram can show up to four ice breaker questions, each tied to an answer your bot sends when tapped. Ice breakers can be set per locale, so an Arabic-language phone sees Arabic questions, but they aren’t shown on desktop. Pick the four questions that bring the most DMs today: price, availability, location and booking are the usual set.
Source: Meta, Instagram ice breakers
The persistent menu is the always-available set of options in the chat. On Messenger it can hold up to 20 items, though Meta recommends five, needs a Get Started button and supports localised button text. Instagram also supports a persistent menu on its iOS and Android apps, with the same advice to keep it to five items; menu changes aren’t pushed to existing chats in real time. Meta’s own example includes a “Talk to an agent” option, and every menu you build should have one.
Sources: Meta, Messenger persistent menu · Meta, Instagram persistent menu
Then there’s speed. Meta’s policy requires an automated bot to respond to any input within 30 seconds, or the page risks messaging restrictions. That is easy for a menu bot and harder for one that calls a stock system, a calendar and a language model in turn, so measure the slowest path.
Source: Meta, Messenger Platform policy overview
Handing over to a human without losing the thread
Meta no longer supports its old Handover Protocol on Messenger; every business has been moved to Conversation Routing. You set a default app in your Facebook Page settings, and Meta routes each conversation to the app that should answer it. Meta Business Suite Inbox counts as one of those apps and can even be the default. When an agent moves a chat to the Main folder or replies in it, the Inbox takes control, and the bot stays quiet. When a thread has been idle for 24 hours, only the default app can send.
Source: Meta for Developers, Conversation Routing
For a small team, Business Suite’s built-in automations may be enough to start: instant replies, away messages, FAQs, keyword replies and answers about location and hours. The logic is simple “if this, then that”, set up separately for Facebook and Instagram. Once you need stock checks, bookings or CRM records, a connected bot runs the conversation and passes it to the Inbox when a person is needed.
Source: NapoleonCat, Facebook automated responses guide (July 2026)
The handover rules matter more than the bot’s vocabulary. Hand over when the customer asks for a person, after two failed answers, on any complaint or refund, on high-value leads and on anything medical or legal. Pass a two-line summary so the agent doesn’t repeat questions, and tell the customer when a person will reply. If that’s tomorrow, the human agent tag gives seven days.
Answering in Arabic and English on the same account
Most UAE accounts receive both languages. Ice breakers and menus localise by phone locale, but plenty of Arabic speakers run their phones in English. Let the customer’s first message set the reply language, store it against the contact, and switch if they switch.
Write both versions with a native speaker rather than translating at runtime: quick-reply labels, menu items and the private-reply opener are short and highly visible. Test every Arabic reply against Instagram’s 1,000-byte limit. For the language model side, see our guide to building an Arabic-English chatbot customers use.
What to automate first
The right first automations are the questions your team already answers twenty times a day, in sectors where a fast answer decides the sale. This is the order we usually recommend for UAE retail, clinics, restaurants and property agencies.
| Use case | Trigger | Bot reply | Hand to a person when |
|---|---|---|---|
| Price and availability | “Price?” or “available?” comment on a post or reel; ice breaker tap | Private reply asking size, colour or branch, then live price and stock from the store | Item out of stock, bulk or corporate order |
| Hours and location | Keyword or menu tap | Branch hours, map link and parking note in the customer’s language | Customer asks about a branch or service not listed |
| Clinic or table booking | “Book” in DM; menu item | Offer real slots from the booking system and confirm in chat | Medical question, insurance query, group of more than the set size |
| Order status | Message containing an order number or phone number | Status and tracking from the store or courier | Delayed, damaged or disputed order |
| Property enquiry | Comment or DM on a listing post | Ask budget, area, buy or rent, move-in date; save the lead to the CRM | Qualified lead: a named agent takes over within the window |
| Complaint | Negative words, “refund”, “manager” | Acknowledge, collect order details, set expectations | Always, straight away |
Lead capture is the row that pays for the project. Every qualified enquiry should land in your CRM with its source post, language and answers, so sales can see which reels and ads produce buyers. Order updates after the 24-hour window now need utility templates on Messenger, so many UAE businesses move post-purchase updates to WhatsApp instead; our WhatsApp Business API guide covers what that costs.
Every qualified enquiry should land in your CRM with its source post, language and answers, so sales can see which reels and ads produce buyers.
How OXEDGE does this
We build Instagram and Messenger bots that answer in Arabic and English, write leads into your CRM and hand off to your team cleanly.
- DM audit: a month of real messages and comments sorted by intent, language and time of day, to choose the first five automations.
- Arabic-first copy for ice breakers, menus, private-reply openers and quick replies, checked against Meta’s limits.
- Integration with your store, booking system and CRM, with Conversation Routing set up so the bot and Business Suite Inbox never talk over each other.
- A weekly report on response time, containment and leads, plus a handover runbook your team owns.
Consent, the PDPL and Meta’s Platform Terms
A DM bot collects personal data the moment it asks for a name, a phone number or a budget. The UAE’s Personal Data Protection Law, Federal Decree-Law No. 45 of 2021, in force since 2 January 2022, prohibits processing personal data without the owner’s consent except in defined cases, and gives people the right to correct their data and to restrict or stop its processing. The UAE Data Office is the authority responsible for its policies, standards and complaints. The DIFC has its own data protection law, so check which regime applies to your entity.
Source: u.ae, data protection laws
Meta’s Platform Terms, last updated on 3 February 2026, add their own rules for any app that reads messages. You must publish and follow a privacy policy at a public URL, use Platform Data only for the permitted purposes in Meta’s developer documentation, never sell, license or buy it, delete it promptly when the user or Meta asks, and never use it without valid consent to build or augment user profiles.
Source: Meta Platform Terms
In practice: a short consent line before the bot saves anything to your CRM (“Can we save your number so an agent can follow up?”), a privacy-policy link in the menu and a working route for delete requests. Clinics should keep symptoms and medical details out of Instagram DMs altogether and move them to their booking or patient system. Our PDPL guide for product teams covers the wider obligations. This section is general guidance, not legal advice.
Measuring whether the bot works
A bot that answers instantly but sends everyone to an agent has only moved the queue. Track these from week one, split by channel and language, against the month before launch.
| Metric | How to measure it | What it tells you |
|---|---|---|
| First response time | Time from the customer’s first message to the first reply, bot or human | Whether after-hours and weekend DMs are now answered |
| Containment rate | Share of conversations closed without a handover | How much routine work the bot really removes |
| Handover quality | Time for an agent to pick up, and repeat questions per handover | Whether the summary and routing work |
| Comment reply rate | Private replies that receive a customer reply | Whether your one opening message earns a response |
| Leads captured | Qualified leads written to the CRM, by post, ad and language | Which content produces buyers, not just DMs |
| Arabic versus English | Containment and satisfaction for each language | Whether one language is being served worse |
Read the failed conversations every week: they show the questions the bot was never taught and the moments customers gave up.
Launch checklist
Tick what’s true for your account today. Eight or more and you’re ready to launch; under six, fix the gaps first.
0 of 10
- The Facebook Page and Instagram professional account are owned by the company’s business portfolio, not a staff member or agency
- We know our top ten DM questions and how many messages arrive each week, by language
- Four ice breakers and a five-item persistent menu are written in Arabic and English
- The menu includes a clear “talk to a person” option
- Comment-to-DM openers ask one question with quick replies, and fit Instagram’s 1,000-byte limit
- Conversation Routing has a default app, and agents know how Business Suite Inbox takes over
- Handover rules cover complaints, refunds, failed answers and high-value leads
- No automation relies on deprecated message tags or bot messages under the human agent tag
- The bot asks consent before saving contact details and links to our privacy policy
- Response time, containment and leads are reported weekly to a named owner
Questions UAE buyers ask
Can an Instagram chatbot message customers first?
No. A bot can only respond. The customer must act first by sending a message, tapping a call-to-action button, clicking a Click-to-Messenger ad or reacting to a message. That opens a 24-hour window. A comment gives you one private reply within seven days.
How does comment-to-DM work on Instagram?
It’s built on private replies. When someone comments on a post or reel, your app can send that person one private message within seven days. If they reply, the 24-hour window opens and the bot can carry on. If they don’t, you can’t send a second message.
Can an Instagram chatbot reply in Arabic and English?
Yes, on the same account. Let the customer’s first message set the language, store it against the contact and switch if they switch. Instagram text messages are limited to 1,000 bytes and Arabic letters take two bytes each, so an Arabic reply hits the limit at about half the length of an English one.
How does a chatbot hand a chat over to a person?
Meta now uses Conversation Routing. You set a default app, and Meta Business Suite Inbox takes control when an agent replies, so the bot stays quiet. Hand over when the customer asks for a person, after two failed answers and on any complaint or refund. The human agent tag allows manual replies for seven days.
Do we need consent before the bot saves a customer’s details?
Yes. The UAE Personal Data Protection Law, Federal Decree-Law No. 45 of 2021, prohibits processing personal data without the owner’s consent except in defined cases. Add a short consent line before saving anything to your CRM, and keep medical details out of Instagram DMs.
Work with OXEDGE
Answer every Instagram and Messenger DM in minutes, in Arabic and English, and see which posts turn into buyers.
We start with a review of a month of your real DMs and comments, then design the first automations and the handover rules around them. You leave the first conversation with a prioritised list of what to automate, what to keep human and how to measure it.
