Is Callface safe?
Callface can send the open WhatsApp Web conversation to its transcription server when its own messaging triggers it.
On web.whatsapp.com, a content script reads the messages in the open chat (sender, text, time) and posts them with the user's access token to Callface's transcription backend. It runs only on an internal exportMessages message from the extension, and no sender for that message was found in the shipped code.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Where it sends data
Destinations our analysis observed Callface contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- transcription.dev.callface.io
Callface sends data to transcription.dev.callface.io. No other extension we have analysed sends data here.