Instacart Terms

Instacart · agreement dated May 7, 2026 · Official agreement

Read the agreement

11 of 172 cards in Security & Safeguards

Security & Safeguards · Restriction or exception

Alcohol delivery requires photo ID, an ID scan and sober recipient; otherwise the alcohol is not delivered

When a Third-Party Provider delivers alcohol, the recipient must show valid government-issued photo identification proving age, the provider will electronically scan the ID, the provider may require a signature, and the recipient must not show signs of intoxication. Alcohol may not be bought to resell or to give to anyone under legal drinking age. If verification requirements are not met, the alcohol will not be delivered and the alcohol portion of the order will be canceled. The Terms do not say how that portion is refunded or charged.

Supporting quotations

When alcohol is delivered by a Third-Party Provider:
The recipient must show valid government-issued photo identification proving age.
The Third-Party Provider will electronically scan the ID.
The Third-Party Provider may require the recipient’s signature.
The recipient must not show any signs of intoxication when receiving the delivery.
Alcohol may not be purchased to resell or to provide to anyone under legal drinking age.
If verification requirements are not met, the alcohol will not be delivered and the alcohol portion of the order will be canceled.

Not stated here

  • Whether and how the canceled alcohol portion is refunded, and what happens to the scanned ID data, is not stated here.

Security & Safeguards · Restriction or exception

Prescription deliveries have age representations and delivery verification like alcohol

By placing an order for a Prescription Drug Product you represent that both you and the Recipient, if different, are of legal age in the delivery location to purchase, possess, use and/or consume it. When a Third-Party Provider delivers a prescription, the recipient must show valid government-issued photo ID proving age, the provider electronically scans the ID, may require a signature, and the recipient must not show signs of intoxication. Prescription Drug Products may not be bought for resale or for anyone not of legal age. If verification is not met, the product is not delivered and that portion of the order is canceled.

Supporting quotations

you represent that both you and the Recipient (if different) are of legal age in the delivery location
When Prescription Drug Products are delivered by a Third-Party Provider:
The recipient must show valid government-issued photo identification proving age.
The Third-Party Provider will electronically scan the ID.
The Third-Party Provider may require the recipient’s signature.
The recipient must not show any signs of intoxication when receiving the delivery.
Prescription Drug Products may not be purchased for resale or for anyone who is not of legal age.
If verification requirements are not met, the Prescription Drug Product will not be delivered and that portion of the order will be canceled.

Qualifications & exceptions

  • This verification applies to attended delivery; Unattended Delivery (elected separately) has its own terms.

Not stated here

  • The Terms do not say how a canceled prescription portion is refunded.

Security & Safeguards · Restriction or exception

Instacart does not guarantee prescription packaging prevents loss, theft, tampering or disclosure

Prescription drug products are typically packaged to protect the contents in transit and limit visibility of the medication, but the packaging may display the recipient's name, delivery address and other legally required information. Instacart says it does not control the pharmacy's packaging practices and does not guarantee the packaging will prevent loss, theft, tampering, temperature exposure or disclosure of information.

Supporting quotations

Prescription drug products are typically provided in packaging intended to protect the contents during transit and to limit visibility of the medication inside.
Packaging may display the recipient’s name, delivery address, and other information required by law.
Instacart does not control the pharmacy’s packaging practices and does not guarantee that packaging will prevent loss, theft, tampering, temperature exposure, or disclosure of information.

Qualifications & exceptions

  • Applies to Unattended Delivery of prescriptions.

Security & Safeguards · Restriction or exception

Prescription questions go to the pharmacy by phone, and unencrypted messages about prescriptions are covered by a waiver

Questions about a prescription drug product you order must be handled by telephone with the dispensing pharmacy. Retailers (including pharmacies) and/or Instacart may send you unencrypted SMS messages, push notifications or other electronic notices about your prescription orders, with some risk that unintended third parties could read them. By using the Services to order prescription drug products you waive and release, to the maximum extent permitted by law, claims against Instacart, its affiliates and Third-Party Providers for harm arising from these communications.

Supporting quotations

Any questions about a prescription drug product you order through the Services must be handled by telephone.
may send you unencrypted SMS messages, push notifications, or other electronic notices about your prescription orders
There is some risk that these messages could be read by unintended third parties.
you waive and release any claims (to the maximum extent permitted by law) against Instacart, our affiliates, and Third-Party Providers for any harm or damage arising out of or related to these communications

Qualifications & exceptions

  • The waiver applies "to the maximum extent permitted by law".

Security & Safeguards · Restriction or exception

Age-restricted deliveries require photo ID and an ID scan; otherwise that portion is canceled

When age-restricted products are delivered by a Third-Party Provider, the Recipient must show valid government-issued photo identification proving age, the provider will electronically scan the ID, the provider may require a signature, and the recipient must not show signs of intoxication. Restricted products may not be bought for resale or for anyone not of legal age. If verification requirements are not met, the products will not be delivered and the age-restricted portion of the order will be canceled.

Supporting quotations

When age-restricted products are delivered by a Third-Party Provider:
The Recipient must show valid government-issued photo identification proving age.
The Third-Party Provider will electronically scan the ID.
The Third-Party Provider may require the recipient’s signature.
The recipient must not show any signs of intoxication when receiving the delivery.
Restricted products may not be purchased for resale or for anyone who is not of legal age.
If verification requirements are not met, the age-restricted products will not be delivered and the age-restricted product portion of the order will be canceled.

Not stated here

  • The Terms do not say how a canceled portion is refunded or what happens to scanned ID data.

Security & Safeguards · Restriction or exception

You and anyone you let use the Services must not copy, reverse engineer, disrupt or bypass controls

The technical restrictions bind you and any person or system you authorize, permit, enable, deploy, delegate to or otherwise cause to access the Services, including household members, employees, contractors, recipients and any Automated Systems or AI Agents. They must not copy, modify, distribute, sell, lease or otherwise exploit the Services beyond what the Terms allow; reverse engineer, decompile, disassemble or tamper with them, including by tracking inputs and outputs to mimic system behavior, unless law expressly allows or Instacart gives prior written permission; interfere with or disrupt the Services; or circumvent technical restrictions, access controls, rate limits, security features or compliance controls such as age verification, identity verification or geographic restrictions.

Supporting quotations

You—and any person or system you authorize, permit, enable, deploy, delegate to, or otherwise cause to access or use the Services (including household members, employees, contractors, recipients, and any Automated Systems or AI Agents)—must not:
Copy, modify, distribute, sell, lease, or otherwise exploit any part of the Services or their content beyond what these Terms allow.
Reverse engineer, decompile, disassemble, tamper with, or otherwise attempt to discover the source code or underlying components of the Services
unless applicable law expressly allows it despite this restriction or Instacart gives prior written permission
Interfere with or disrupt the Services
Circumvent technical restrictions, access controls, rate limits, challenges, security features, or compliance controls such as age-verification, identity-verification, or geographic restrictions.

Qualifications & exceptions

  • Reverse engineering is allowed where applicable law expressly allows it or Instacart gives prior written permission.

Security & Safeguards · Restriction or exception

Scraping, crawling and ignoring robots.txt are prohibited, and robots.txt is part of the Terms

You must not scrape, crawl, data-mine, collect, harvest or otherwise access the Services or their content except through interfaces Instacart expressly authorizes for that purpose. You must not access the Services by any automated means in a way that circumvents or disregards Instacart's robots.txt file, which the Terms say is incorporated by reference and updated from time to time.

Supporting quotations

Scrape, crawl, data-mine, collect, harvest, or otherwise access the Services or their content except through interfaces expressly authorized by Instacart for that purpose.
Access the Services using any automated means, crawler, or bot in a manner that circumvents or disregards Instacart's
which is incorporated into these Terms by reference and updated from time to time

Not stated here

  • The contents of robots.txt are outside the supplied text and may change at any time.

Security & Safeguards · Restriction or exception

No Automated System may use your account unless Instacart expressly authorized it, and only through approved interfaces

You may not authorize, permit, enable, deploy, delegate to or otherwise cause any Automated System to access or operate the Services through your account unless Instacart has expressly authorized that access. An authorized Automated System may access or operate the Services only through Instacart-provided interfaces, tokens and scopes, and only for the specific actions and purposes Instacart expressly permits.

Supporting quotations

You may not authorize, permit, enable, deploy, delegate to, or otherwise cause any Automated System to access or operate the Services through your account unless Instacart has expressly authorized that access.
Any authorized Automated System may access or operate the Services only through Instacart-provided interfaces, tokens, and scopes, and only for the specific actions and purposes Instacart expressly permits.

Not stated here

  • The Terms do not say how to obtain express authorization for an Automated System.

Security & Safeguards · Restriction or exception

Programmatic access is covered by separate API and Developer Terms and can be limited or revoked at any time

Programmatic and automated access to the Services, including APIs, data feeds, webhooks and SDKs, is subject to separate API Terms, Developer Terms and licenses, which are not supplied. An Automated System acting for you must properly identify and authenticate itself and you must ensure compliance. Instacart may limit, tier, suspend or revoke programmatic or automated access, and update or disable interfaces, at any time for security, policy, business or legal reasons, with or without notice.

Supporting quotations

Programmatic and automated access to the Services (including APIs, data feeds, webhooks, and SDKs) is subject to separate API Terms, Developer Terms, and licenses.
must properly identify and authenticate itself, and you must ensure that such usage complies with those Terms
Instacart may limit, tier, suspend, or revoke programmatic or automated access (and update or disable interfaces) at any time for security, policy, business, or legal reasons, with or without notice.

Not stated here

  • The API Terms and Developer Terms are not supplied.

Security & Safeguards · Restriction or exception

Automated Systems must identify themselves, must not pose as humans, and must send an "Agent/[name]" user-agent

You must ensure any Automated System that interacts with the Services, or with Instacart, a Retailer, a Third-Party Provider or their personnel on your behalf clearly identifies itself as an automated system and does not misrepresent its nature, origin or affiliation or impersonate another tool, service or agent; does not give false or misleading responses to prompts or challenges seeking to determine whether it is human and does not appear to be a human; and discloses that it is an agent and its name by including "Agent/[agent name]" in the user-agent string of all HTTP/HTTPS requests.

Supporting quotations

You must ensure that any Automated System that interacts with the Services, or with Instacart, any Retailer, Third-Party Provider, or their respective personnel on your behalf:
Clearly identifies itself as an automated system and does not misrepresent its nature, origin, or affiliation, or impersonate any other tool, service, or agent.
Does not give false or misleading responses to any prompts or challenges seeking to determine whether it is human, and does not impersonate or attempt to appear as a human user.
Discloses that it is an agent and its name by including “Agent/[agent name]” in the user-agent string of all HTTP/HTTPS requests.

Security & Safeguards · Restriction or exception

robots.txt permission for search indexers does not extend to agentic, AI or other commercial use

Where Instacart's robots.txt expressly permits access by a search engine crawler or indexing agent, that permission is granted solely for passive search engine indexing. It does not, expressly or by implication, authorize any Automated System to access the same pages for any other purpose, including agentic browsing, interactive or transactional use, AI-assisted functionality or any other commercial purpose. The permission is strictly limited to the specific crawling agent and the specific indexing purpose for which it is granted.

Supporting quotations

that permission is granted solely for the purpose of passive search engine indexing
It does not — expressly or by implication — authorize any Automated System to access those same pages or content for any other purpose, including agentic browsing, interactive or transactional use, AI-assisted functionality, or any other commercial purpose.
The scope of any robots.txt permission is strictly limited to the specific crawling agent and the specific indexing purpose for which it is granted.

Cross-references