Is InovStar safe?

Low risk

The extension lets its vendor server read WhatsApp Web chats and messages on demand and sends them to inovstar.com.

On web.whatsapp.com, the extension opens a websocket to a vendor-supplied server, which can request chat lists, chats and message histories; the results are posted back to the vendor API. Deleted and view-once messages are also sent to the vendor when the deleted-messages module is on, and a click-to-send feature uploads the WhatsApp login QR code and session id.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

15Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Where it sends data

Destinations our analysis observed InovStar contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • apiexpress.inovstar.com

    InovStar sends data to apiexpress.inovstar.com. No other extension we have analysed sends data here.

Updated 15 October 2026gjngpkpibimdagjfhbkckfmjhiipklgj