Back to Home

Privacy Policy

Last Updated: January 2026

1. The "Zero Knowledge" Foundation

IMAGXP (Identity Monetization Auto Governance Exchange Protocol) is not a centralized platform. It is a decentralized, Edge-to-Edge communication standard. We do not control, store, or monitor the traffic flowing between AI Agents and Web Publishers. The protocol operates strictly through cryptographic handshakes executed on your own servers.

2. Private Keys & Identity

When you generate an IMAGXP Identity (`npx imagxp generate-identity`), you create a Public/Private Key Pair.

  • Private Keys: Your Private Key (IMAGXP_PRIVATE_KEY) remains securely on your server. We never see, store, or transmit your Private Key.
  • Public Keys: Your Public Key is hosted publicly on your domain at .well-known/imagxp-agent.json. This is intentional and necessary for the protocol to verify your identity.

3. Log Data & Verification

Publishers running the IMAGXP Middleware generate transaction logs (verifying who accessed their data). These logs are stored entirely on the Publisher's infrastructure (e.g., Vercel, AWS S3, local databases). The IMAGXP core development team has zero access to your access logs, traffic volume, or the specific payloads exchanged.

4. The Optional "Broker" Network

If you voluntarily opt-in to use the IMAGXP Broker Node for automated monetization and bond pooling:

  • The Broker will process and temporarily store Cryptographic Visas (JWTs) to settle financial transactions ($0.01 micro-payments).
  • The Broker records Request Metadata (Signatures, Timestamps, Domain Names) to prove to Publishers that an Agent visited and owes payment.
  • The Broker does not store or process the actual content (articles, code, data) being transferred between the Publisher and the Agent.

5. Third-Party Archiving (The Snapshot Defense)

To ensure non-repudiation in legal disputes, your public imagxp-agent.json file is designed to be repeatedly scraped and archived by third parties (such as the Internet Archive's Wayback Machine or Common Crawl). You acknowledge that this public identity binding is permanently recorded on the public internet.