EcoSynq Connect

Connected services

The catalog includes Google (Gmail, Drive, Calendar, Tasks, Chat, Analytics and Search Console), Microsoft Graph (Outlook, Teams, OneDrive and SharePoint), Meta Business (Facebook Pages, professional Instagram and Page Messenger), WhatsApp Business, Slack, Mailchimp, Telegram, GitHub, Todoist, Trello, Discord, Zendesk, X and LinkedIn, as well as user-owned/self-hosted HTTPS APIs and WebView-only services. Listing a service does not mean every API operation is automatically authorized, executable or approved by the provider.

A connection is not an operation: Webex Messaging (webex-messaging), Chatwork, GroupMe, Pushbullet, Toggl Track, Teamwork Projects, Twist, Fastmail, Twitch, Zoho Cliq, and exact-tenant Mattermost, Element (Matrix) (matrix-element), Rocket.Chat, Zulip and Nextcloud Talk have isolated credential profiles and official operation catalogs. This is neither provider approval nor a claim that every row can run: only operations marked Executable in the installed runtime manifest may be offered to Codex; AdapterMissing, PolicyBlocked and Deprecated rows remain visible but disabled. Fastmail has 41 built-in executable JMAP/Masked Email operations, each intersected with the capabilities advertised by the live session. Plurk, VK and Threema Gateway remain AdapterUnavailable, accept no provider credential and expose no API operation. See the Data Use Notice for exact external gates.

Local-first data flow

• Access/refresh tokens, API keys and other provider credentials remain in a Windows DPAPI-protected local vault. This is separate from each account's isolated WebView2 profile, which may contain cookies, site storage, cache and saved sign-in state. Deleting either store does not delete the other.
• The Telegram TDLib session/database is a separate local store; logging it out and deleting it is not the same as disconnecting an API credential or deleting a WebView2 profile.
• The EcoSynq OAuth brokers keep application credentials and coordinate a short encrypted login-delivery transaction for the matching Connect client. They do not archive user messages or documents.
• The WhatsApp webhook relay encrypts an incoming event for the destination device, deletes it on acknowledgement, and expires an unacknowledged envelope after at most 24 hours.
• Access to accounts, provider operations, folders, files and local tools is controlled separately.

Codex and provider data

Connect does not infer intent through keyword routing. Codex receives only the capability catalog enabled and runtime-validated at that moment, never raw credentials. The “no-training” switch records only the user's dated declaration; Connect cannot technically verify the selected OpenAI plan, workspace policy, Data Controls, contract or legal compliance. Provider content requires a separate provider-policy gate. A Google Workspace agentic action also requires an in-product disclosure and affirmative confirmation immediately before collection/action, plus prompt-injection protection; a checkbox or OAuth grant alone is not a Limited Use guarantee. Telegram API content is excluded from Codex and every AI/ML system unless Telegram provides written permission.

Independent product

EcoSynq Connect is independent and is not an official client of the listed third-party providers. Their marks belong to their respective owners. The component using the Telegram API is an unofficial Telegram client using EcoSynq's own API identifier and does not use the official Telegram logo.

Operator: E-co Inform Services Kft., 1147 Budapest, Telepes utca 13. fszt. 1., Hungary · Company registration: 01-09-200201 · Tax: 25108930-2-42 · EU VAT: HU25108930 · info@e-co-inform.hu · +36 30 553 4223

Governance note: these public disclosures document the intended and implemented data flow, but independent Hungarian/EU legal review remains required before paid or general public launch.