Sourcing UGC and getting the rights to run it as ads

A customer posting a video of your product gives you nothing you can advertise with. Permission to run that footage as a paid ad is a separate thing, granted explicitly, with a scope and a term, and recorded somewhere the ad team can check before a campaign launches. Stores that skip the record end up either running content they cannot document or losing good footage because nobody can confirm it was cleared.

This is a process description, not legal advice. Have a lawyer in your market review the template you end up using, particularly around likeness and minors.

What permission has to cover

A usable grant answers six questions in writing:

1. What. The specific content, identified well enough that both parties know which files are covered.
2. Where. The channels: paid social, organic social, the website, email, retail displays, out of home.
3. How long. A term with an end date, or perpetual if the creator agrees to it explicitly.
4. Where in the world. Territory, which matters for stores selling across borders.
5. What you may change. Whether you can edit, crop, add captions, cut it into different lengths, and combine it with other footage.
6. Who else. Whether the grant extends to your agency or partners running ads on your behalf.

A comment saying “sure, use it” answers none of these. Reply with the terms and get an affirmative response to those terms, or use a form.

Four sources, four different agreements

Source	How it arrives	Agreement shape
Customers	Reviews with photos, tagged posts, replies to a request	Short permission form, usually perpetual, no payment
Paid creators	Commissioned to a brief	Contract with deliverables, usage term, exclusivity and payment
Employees	Filmed in store or warehouse	Written consent covering likeness, and a policy for after they leave
Community and ambassadors	Ongoing relationship, often gifted product	Standing agreement refreshed periodically

Keep the four separate in your records, because the obligations differ. Creator agreements have payment and exclusivity terms. Customer permissions do not, but they are far more likely to involve someone who did not expect to appear in an ad.

Ask at the moment the customer is happiest

The highest response rate comes from asking shortly after the product has arrived and been used, not immediately after purchase. Three practical placements:

• A post-purchase email sent after expected delivery plus a short use period, asking for a photo or a short clip with a clear description of how it might be used. The timing logic sits in post-purchase flows and the sequence design is in post-purchase flow design.
• The review request itself, with an image upload field and a permission checkbox that states the scope in plain language.
• A reply to a tagged post, with the terms in the reply and a link to a short form.

Make the ask specific. Requests for a photo produce photos of the packaging. Requests that name a moment produce useful footage: the product in use, the thing it replaced, the problem it solved, the unboxing if that is genuinely interesting in your category.

Gifting, payment and what each triggers

Anything of value given in exchange for content creates a material connection between the creator and the brand, and that connection has to be disclosed when the content is presented as an endorsement. Free product counts. Discount codes count. Payment obviously counts.

Two implications for a store:

• In creator content, the disclosure belongs in the content, clear and hard to miss, not buried in a caption or hidden behind a “more” link.
• In paid ads you run from your own account, the ad is already identified as advertising, but claims made in the footage are still yours to substantiate. A creator saying something you could not say does not make it sayable.

Where a store reposts customer content that was created without any incentive, no material connection exists, and the honest description of that content is what it is.

The permission record

Capture the same fields every time, in one place:

• Creator name and contact method.
• Date permission was granted, and the exact wording they agreed to.
• Asset identifiers, matching the file names used in the ad library.
• Channels, term, territory and editing rights.
• Payment or gift provided, if any.
• Whether other identifiable people appear, and whether they consented.
• Whether third-party material appears: music, artwork, branded products, visible locations.
• Expiry date, and a reminder set before it.

Name assets so the record and the ad account agree. If the ad platform shows an asset code, the permission record should carry the same code. The naming discipline is the same one used in a creative testing framework for Meta ads.

Things in the frame that are not yours

Three categories cause most takedowns and rejections:

• Music. A track that was licensed for a personal social post is not licensed for a paid ad. Replace it with production music you have cleared, or with sound design, before the asset goes into a campaign.
• Other brands and logos. Visible packaging, clothing and devices belonging to other companies can create problems with both platforms and the brand owner. Frame them out, blur them, or reshoot.
• Artwork, locations and private property. Murals, art on a wall and some interiors carry their own permissions.

Screen every asset for these before it enters the testing rotation, not after a campaign is live.

People, likeness and minors

Everyone identifiable in the footage needs to have agreed to appear in advertising, not just the person who filmed it. That includes a partner in the background and a colleague in a warehouse shot.

Content featuring children requires consent from a parent or guardian, and several categories restrict advertising imagery involving minors entirely. Baby and kids brands should settle this with counsel and build the consent step into the collection form rather than handling it case by case.

Health, body and personal-situation content carries an additional layer, because platforms restrict ads that imply knowledge of a viewer’s personal characteristics. A customer testimonial about a personal health outcome may be genuine and still be unusable as an ad. That ground is covered in ad policy for health claims.

Running ads from a creator’s account

Partnership formats let a brand run ads that appear from a creator’s handle. They need two things that are easy to forget: the creator’s explicit permission for that specific use, granted through the platform’s own permission mechanism, and an understanding of what happens when the relationship ends. Record the permission grant date and the agreed end date alongside the rest of the paperwork, and check the permission is still active before relaunching an old asset.

Store it where the ad team looks

A rights record nobody can find is the same as no record. Keep one library with the asset, the permission record and the expiry in the same row, accessible to whoever builds campaigns. Add a simple status field: cleared, cleared with restrictions, expired, do not use. A campaign builder should be able to answer “can I run this” in under a minute.

When a license expires

Set the reminder before the date, and decide in advance what happens: renew with the creator, take the asset down, or replace it. An expired asset still running is the most common rights failure, and it is entirely preventable with a calendar entry and a quarterly audit of live ads against the library.

Whether this content outperforms produced work in your category is a question your own testing answers, and does UGC creative outperform studio creative covers what the pattern usually looks like. Volume requirements are in how many ad creatives does a Meta campaign need, and the same footage often earns its keep twice by appearing on the product page, which is part of product page CRO.

---

Sources

• FTC: The FTC's Endorsement Guides, What People Are Asking
• FTC: Disclosures 101 for Social Media Influencers
• Meta: Advertising Standards