Is BipChat safe?
BipChat sends deleted and view-once WhatsApp Web messages to its own backend at apiexpress.bipchat.com.
On web.whatsapp.com, the extension's injected CRM script reads messages that were deleted or sent as view-once and posts them, along with webhook notifications, to the vendor's API. Requests carry a bearer token stored in the extension's local storage, and media files are fetched and returned as base64 to the page. The extension's content scripts run only on WhatsApp Web.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Where it sends data
Destinations our analysis observed BipChat contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- apiexpress.bipchat.com
BipChat sends data to apiexpress.bipchat.com. No other extension we have analysed sends data here.