Is Hotzapp: WhatsApp CRM - Pare de Perder Vendas safe?

Clean risk

Hotzapp lets WhatsApp Web page scripts read the extension's saved access token.

Hotzapp allows scripts running on web.whatsapp.com to send an external message to the extension and receive account details when the user is signed in. The response includes the saved bearer access token along with user ID, name, and plan information from extension storage.

Hotzappv1.133.0Chrome Web Store
0Risk
Who publishes it

Hotzapp - no other listings under this identity

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
Hotzapp
Declared legal entity
Hotzapp
Registered address
R. Antônio Basil Schroeder, 37, São José, SC 88110-400, BR
Website
hotzapp.com/contact/

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Where it sends data

Destinations our analysis observed Hotzapp: WhatsApp CRM - Pare de Perder Vendas contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • web.whatsapp.com

    Hotzapp: WhatsApp CRM - Pare de Perder Vendas sends data to web.whatsapp.com. 7 other extensions we have analysed send data here.

Updated 30 September 2026pfeiikbbjjbdcjhkapplmkcjfionhegl