User generated content works in marketing because it shows a real person using the thing, which no studio shot can fake. The operational reality is less glamorous: you need a repeatable way to find it, written permission before you use it, disclosures that satisfy the FTC when anything of value changed hands, and a moderation process so a bad asset never reaches a product page. This guide covers all four with templates you can copy.
Two legal regimes apply and they solve different problems. Copyright decides whether you may reproduce the photo at all. The FTC rules decide whether the way you present it is deceptive. You need to clear both, and clearing one does nothing for the other.
Where usable UGC actually comes from
| Source | Volume | Quality | How to work it |
|---|---|---|---|
| Tagged posts and mentions | Steady | Mixed | Check the tagged tab twice weekly, save candidates to a shared folder |
| Photos attached to reviews | Low but reliable | High intent | Prompt for a photo in the review request, not after |
| Support and success inbox | Low | Best stories | Give the team a one click way to flag a great message |
| Branded hashtag or challenge | Spiky | Varies wildly | Run as a campaign with published rules and a license clause |
| Community and groups | Steady | Authentic, unpolished | Ask in thread, always credit, never lift silently |
If you want a volume spike rather than a trickle, a structured campaign is the tool. Our guide on creating and managing a TikTok challenge covers running one with rules and a rights clause built in from the start, which is far easier than chasing permissions afterward.
Rights: a tag is not a license
When a customer posts a photo, they own the copyright in it. Tagging your brand, using your hashtag, or leaving it public grants you nothing beyond what the platform’s own terms allow, and those terms generally cover the platform, not you. Reposting to your own Story is a lower risk grey area. Putting the same image in a paid ad, on a product page or in an email is a commercial use that needs an actual license.
Ask in a way that produces a written record. A public reply comment is weak evidence. Direct message or email is better, and a signed form is best when the asset will run in paid media or on packaging.
Hi [name],
We love your photo of [specific thing] from [date or link].
May we have your permission to use it in our marketing?
Specifically: our website product pages, our email newsletter,
our social accounts, and paid social ads, worldwide, for
two years from today. We would credit you as @[handle]
wherever the format allows.
You keep ownership. You can ask us to stop using it at any
time by replying to this message and we will remove it
within 10 business days.
Reply with "I agree" if that works for you, or tell us
what you would change.Name the channels, name the duration, name the territory, and offer a way out. Vague requests such as “can we share this?” come back to bite you the day someone wants the image pulled from a billboard. Store every approval alongside the asset file with the date and the exact wording sent.
Disclosure: what the FTC actually requires
Two sets of rules matter. The Endorsement Guides at 16 CFR Part 255 cover endorsements generally, and the Consumer Reviews and Testimonials Rule at 16 CFR Part 465, effective October 21, 2024, covers reviews specifically and carries civil penalties for knowing violations.
| Situation | What is required |
|---|---|
| You sent a free product and they posted | Disclose the material connection clearly, everywhere they endorse it |
| Entry into a prize draw for posting | The incentive is a material connection and must be disclosed |
| An employee posts about your product | The employment relationship must be disclosed clearly and conspicuously |
| You offer an incentive for a review | Allowed only if it is not conditioned on the review being positive |
| You want to remove a negative review | Suppression through unfounded threats or intimidation is prohibited |
| You buy followers or engagement | Prohibited where you knew or should have known the indicators were fake |
On placement, the FTC’s guidance in its Endorsement Guides FAQ is specific. Disclosures buried in a video description, hidden behind a “more” link, sitting in a comment, or shown only as a platform badge are not sufficient on their own. In video, the FTC says a disclosure presented both visually and audibly is more likely to be clear and conspicuous. Ambiguous tags such as “#ambassador” or “#gifted” without naming the brand do not do the job. The FTC’s questions and answers on the reviews rule is the companion reference.
Practically, put the requirement in the brief and the contract. Tell contributors the exact words to use, ask them to say it in the first few seconds as well as showing it on screen, and check compliance before you amplify anything.
Where to place UGC, in priority order
| Placement | What to use | How to test it |
|---|---|---|
| Product page gallery | 3 to 6 customer photos below the studio images | Split test add to cart rate over at least two weeks |
| Paid social creative | Vertical video with the disclosure on screen | Run against your best studio creative, same audience and budget |
| One customer photo plus one sentence of their words | Split test clickthrough on the same offer | |
| Category and landing pages | A strip of six images with handles credited | Scroll depth and progression to product pages |
| Retail and packaging | Only assets with a signed release | Not testable, so raise the legal bar instead |
Product pages come first because the visitor is already deciding, and a photo of the product in a home that looks like theirs answers the question a studio shot cannot. Paid social comes second because UGC style creative usually beats polished creative on cost per result, but you should verify that on your own account rather than take it on faith. The measurement approach in our guide to measuring marketing ROI applies directly here.
Moderation that catches problems before publication
Run every candidate asset through a fixed checklist before it goes anywhere. Keep it short enough that people actually use it.
First, is written permission on file, naming the channel you are about to use? Second, does the image show unsafe use, another brand’s logo, a minor without guardian consent, or anything that would embarrass either party? Third, if there was an incentive, does the content carry an adequate disclosure? Fourth, does the caption make a product claim you cannot substantiate, such as a health or performance claim? A customer saying your supplement cured something is a claim you have adopted the moment you repost it.
Assign one named owner for this check. Distributed responsibility means nobody does it, and the failure only surfaces when something is already live in a paid campaign.
Common mistakes and fixes
Screenshotting instead of asking. Low quality and no license. Ask for the original file in the permission message; most people send it happily.
Permission for social, use in ads. The most common overreach. Name every channel in the request, and if the plan changes later, ask again.
Only asking happy customers for reviews. Review gating breaches platform policies and sits badly against the FTC rule. Ask everyone and fix what the negatives reveal, as covered in our guide on digital marketing for small businesses.
No credit. Costs nothing, and crediting handles visibly encourages the next contributor. Make it a template field so it never gets skipped.
UGC sitting in one channel. A great customer video should reach product pages, email and paid, not just a Story. Route it through the repurposing plan in our guide on integrating social media with your marketing strategy.
Frequently asked questions
Can I repost a customer photo if I credit them?
Crediting is good practice but it is not a license. Reposting to your own Story is relatively low risk in most cases, while using the image on a product page, in an email or in a paid ad is a commercial use that needs explicit permission. Ask, and keep the reply.
Do customers need to disclose if I did not pay them?
If nothing of value changed hands, no disclosure is required. If you sent a free product, a discount, a prize draw entry or anything else of value, that is a material connection and it has to be disclosed clearly in the content itself.
Is a platform’s paid partnership label enough on its own?
No. The FTC’s guidance is that built in platform tools are not sufficient by themselves and that responsibility rests with the endorser and the brand. Use the label and require a disclosure in the content, ideally both spoken and shown on screen for video.
Can I edit a customer’s caption before using it?
You can trim for length, but not in a way that changes the meaning or strengthens a claim. Turning “it helped my back a bit” into “it fixed my back” is deceptive, and you have adopted the claim as your own advertising the moment you publish it.
How long should a permission last?
Two years is a reasonable default for social and web use, with a clear removal process on request. For packaging, print or anything expensive to reprint, negotiate a longer term with a signed release rather than an email exchange.
The bottom line
UGC is cheap to acquire and expensive to get wrong. Build one intake folder, one permission template that names channels and duration, one moderation checklist with a named owner, and one place where approvals live next to the asset files. That infrastructure takes an afternoon and prevents the two failures that actually cost money: using an image you had no right to, and publishing an endorsement with no disclosure.
Once the process exists, put the assets where decisions get made. Product pages first, then paid creative, then email, testing each properly. The content itself is free. The system around it is what turns it into performance.
