Is ChatSac safe?
ChatSac adds a CRM overlay to WhatsApp Web that sends chats, contacts and messages to its own ChatSac API.
On web.whatsapp.com the extension injects a script that reads chats, contacts and messages and posts them to apiexpress.chatsac.com, authorised with a token from extension storage. An optional deleted-message module also uploads deleted messages and view-once media from chats to the same backend, when enabled by the account's server settings or a toggle.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Where it sends data
Destinations our analysis observed ChatSac contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- apiexpress.chatsac.com
ChatSac sends data to apiexpress.chatsac.com. No other extension we have analysed sends data here.