Is Polluz safe?
Polluz forwards WhatsApp Web message content to its own API when webhook forwarding is enabled.
This WhatsApp Web CRM add-on runs only on web.whatsapp.com and injects a script that posts whole message objects to the vendor's Polluz API when the user has configured webhook forwarding. It can also send deleted-message and view-once message captures, but that capture is off by default. Requests carry a bearer token stored in the extension's local storage.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Where it sends data
Destinations our analysis observed Polluz contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- apiexpress.polluz.com.br
Polluz sends data to apiexpress.polluz.com.br. No other extension we have analysed sends data here.