Is UpperChat safe?

Clean risk

UpperChat adds a CRM overlay to WhatsApp Web and routes CRM actions through its own API.

On web.whatsapp.com the extension fetches its API address from apiexpress.upper.chat and forwards CRM actions such as staff chat messages and card or tag operations to that API using a stored token. A user-initiated 'send QR code' button uploads the WhatsApp login QR code and the session ID to the vendor so a remote phone owner can authorise the session.

v0.1.6.7Chrome Web Store
0Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Where it sends data

Destinations our analysis observed UpperChat contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • apiexpress.upper.chat

    UpperChat sends data to apiexpress.upper.chat. No other extension we have analysed sends data here.