Is Woowa CRM safe?
Woowa CRM stores CRM access and refresh tokens in the WhatsApp Web page context.
When a user signs in or refreshes tokens, Woowa CRM writes CRM bearer and refresh tokens into localStorage on web.whatsapp.com and can post stored credential data back into that page. It also sends those token values to crm.woo-wa.com for token refresh, so the sensitive data involved is CRM credential data tied to WhatsApp Web use.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
Who publishes itWoowa CRM - no other listings under this identity
Woowa CRM - no other listings under this identity
What this publisher told the store about itself, and the other listings that told it the same thing.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Where it sends data
Destinations our analysis observed Woowa CRM contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- web.whatsapp.com
Woowa CRM sends data to web.whatsapp.com. 16 other extensions we have analyzed send data here.
- crm.woo-wa.com
Woowa CRM sends data to crm.woo-wa.com. No other extension we have analyzed sends data here.