Is ZapExpress safe?
ZapExpress uploads deleted and view-once WhatsApp Web messages and chat IDs to its own API.
On web.whatsapp.com, the CRM feature reads the content of deleted and view-once messages along with chat IDs and sends them to an API address supplied by the vendor's remote config. Requests carry a bearer token stored by the extension, and a webhook module can also post message JSON. These features are gated by the user's plan; the free plan returns early.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Where it sends data
Destinations our analysis observed ZapExpress contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- api.zap.express
ZapExpress sends data to api.zap.express. No other extension we have analysed sends data here.