Lukky for agencies and community managers

It is the most common practice and the least defensible: the client sends credentials over chat, someone files them in a shared vault, and six months later nobody knows who still has access. When a staff member leaves, everything has to be rotated. When the client turns on two-factor authentication, everything breaks.

Lukky never asks for a password. Each account is connected through Meta's official authorisation flow: the client authorises it from their own account, and the client revokes it when the engagement ends, without going through you.

That is not only cleaner — it belongs in a proposal. The multi-account page covers what the Pro plan connects.

At the end of a campaign you deliver numbers: reach, comments, followers gained. The draw itself usually comes down to "the winner is @someone". If the client asks how they were picked, or if an entrant challenges it publicly, you have nothing.

The certificate is an artefact for the report: post, date, entries kept, winner, readable by anyone. The client can forward it to their own legal team without calling you.

Five social accounts, unlimited draws, up to 100 winners per draw, one draw across an Instagram and a Facebook post at once, scheduling, animations in the client's brand colours, and messaging with winners. €9.99 a month or €39.99 a year, detailed on the pricing page.

The simultaneous draw deserves a mention: a brand that posts the same giveaway on both networks and draws separately ends up with two winners where its rules announced one. That is a real mistake, and it happens often.

If your team needs separate workspaces with per-user roles and permissions, five social accounts on one app is not an agency console; look at the higher tiers on the pricing page.

If your clients run giveaways on TikTok or X, Lukky does not cover them and you will need a second tool. The comparisons say which ones do.

And if the client's brief is list building rather than reach, a comment draw is the wrong instrument entirely: comments give you account handles, not email addresses. That is a campaign platform's job, and pretending otherwise in a proposal is how an agency ends up delivering the wrong thing well.

Three lines, and they are the ones clients actually react to: you will never hold their credentials, they can revoke your access themselves at any time, and every draw comes with a public certificate they can forward to their own legal team. None of that is about features; all of it is about who carries the risk.