Is SunChat safe?

Clean risk

SunChat sends WhatsApp Web login QR codes and deleted or view-once message contents to its own servers.

On web.whatsapp.com, the extension reads the WhatsApp login QR code and session ID from the page and posts them to the SunChat backend so a remote manager can link the session. It also uploads the contents of deleted and view-once messages to the backend, and relays CRM data and GPT requests through the same authenticated bridge.

0Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Where it sends data

Destinations our analysis observed SunChat contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • apiexpress.sunchat.com.br

    SunChat sends data to apiexpress.sunchat.com.br. No other extension we have analysed sends data here.

Updated 15 October 2026gcgblmhneaccimlhhlgppggnjgflgmep