Privacy Policy

GenLayer Foundation (“we,” “us,” or “our”) operates Internet Court and wants you to understand how we collect, use, and disclose information.

Internet Court is the trust layer for agent-to-agent commerce: a single, open, catch-all skill that provides natural-language mandates, delegated permissions, x402 payments, escrow, and dispute resolution, and that loads roughly seventy vendored protocol and connector sub-skills on demand. It connects the fragmented agentic-commerce stack (identity, negotiation, contracts, payment, execution, and disputes) and adds a verification and dispute-resolution layer built on x402, ERC-7710, and GenLayer supervision.

This Privacy Policy describes our practices in connection with information collected through:

• The Internet Court website at internetcourt.org, including the skill.md endpoint used for distribution;
• The Internet Court skill package as distributed through package registries (for example via “npx skill install …”, Claude Code’s “/plugin add …”, and other registries that list the package);
• The Internet Court Telegram bot (“Telegram Agent”), which delivers updates to users who choose to interact with it; and
• Communications between you and us.

Collectively, we refer to these as the “Services.”

This policy does not cover:

• The public blockchains, wallets, node providers, or third-party protocols the skill interacts with when you use it. On-chain activity is public by nature and governed by the rules of the relevant network, not by us.
• Anthropic’s Claude products, or any AI model provider, through which the skill may run. Their handling of your prompts and conversations is governed by their own policies.
• Third-party connectors or protocols invoked by sub-skills, each of which is operated by its respective provider under its own terms and privacy policy.

We aim to collect as little personal information as possible. The categories below reflect current practice.

1. Information collected automatically on our website

When you visit internetcourt.org (including to retrieve skill.md), we and our analytics provider automatically collect standard technical and usage information through cookies and similar technologies, including your IP address, approximate location derived from it, browser and device type, operating system, referring/exit pages, pages viewed, and interaction data.

We use Google Analytics for this purpose. Information collected by Google Analytics is subject to Google’s privacy practices; see https://policies.google.com/privacy.

2. Distribution and download statistics

When you install the skill through a public package registry (for example npm via “npx skill install …”), the registry records installation and download activity. These statistics are generated and published by the registry operator, not by us; we may view the aggregate public statistics the registry makes available. Any personal data (such as an IP address) associated with a download is collected by the registry under its own privacy policy.

3. Telegram bot and communications

If you choose to start or interact with our Telegram Agent, Telegram and we may process your Telegram username or user ID, your public Telegram profile information, and the content and metadata of messages you send to or receive from the bot. We use this to deliver updates and respond to you. Your use of Telegram is also governed by Telegram’s own privacy policy at https://telegram.org/privacy. If you contact us directly (for example by email or through the website), we collect the information you choose to provide, such as your name, contact details, and the content of your message.

4. On-chain and transaction information

The skill facilitates delegated permissions (ERC-7710), x402 payments, escrow, and dispute resolution supervised by GenLayer. Using these features necessarily involves blockchain transactions, which are public and permanent on the relevant network and may include wallet addresses, transaction hashes, amounts, and smart-contract interactions. We do not control public blockchains and cannot alter or delete on-chain data.

5. Information we do not collect

The skill is designed to run within your own agent/Claude environment. We do not collect the contents of your conversations, prompts, or files with your AI assistant, and we do not collect data from your context beyond what is necessary to perform a requested function.

We use the information we collect to:

• Provide, operate, maintain, debug, and improve the Services, including the website, the skill package, and the Telegram Agent;
• Understand how the Services are used through aggregated analytics and download statistics, so we can improve quality and reliability;
• Send you product updates, release notes, and related information via the Telegram Agent where you have chosen to receive them;
• Respond to your inquiries and support requests;
• Protect the security and integrity of the Services, including detecting, preventing, and investigating fraud, abuse, and technical issues;
• Comply with applicable law, legal process, and enforceable governmental requests, and to establish, exercise, or defend legal claims; and
• Aggregate or de-identify information so that it no longer identifies you, which we may then use for any lawful purpose.

We rely on third-party providers to operate the Services. We are not affiliated with these companies and are not responsible for their practices; we encourage you to review their policies. They may include:

• Google LLC (Google Analytics): https://policies.google.com/privacy
• The npm registry / GitHub, Inc. (package distribution and download statistics): https://docs.github.com/site-policy/privacy-policies
• Telegram (Telegram Agent messaging): https://telegram.org/privacy
• GenLayer (dispute-resolution supervision layer): https://genlayer.foundation/privacy-policy

We may also disclose information: to comply with applicable law and to cooperate with public authorities or law enforcement; to enforce our terms; to protect the rights, safety, and property of Internet Court, our users, and others; and in connection with a merger, acquisition, financing, reorganization, or sale of assets, in which case information may be transferred as a business asset.

We do not sell your personal information.

Where you have chosen to receive updates through the Telegram Agent, you can stop receiving them at any time by blocking or stopping the bot in Telegram. We will still send essential service or legal notices where required.

Our website uses cookies and similar technologies for analytics and to make the site function. You can control non-essential cookies through your browser settings or any cookie controls presented on the site. If you block cookies, some parts of the site may not work as intended.

We retain personal information only for as long as necessary for the purposes described in this policy and as permitted by law. Criteria we use to determine retention periods include the duration of our relationship with you, the need to provide the Services, our legal and regulatory obligations, and the advisability of retention in light of our legal position (such as applicable limitation periods).

We use reasonable organizational, technical, and administrative measures to protect personal information under our control. No system can be guaranteed to be completely secure. If you believe your interaction with us is no longer secure, please contact us immediately.

Depending on where you live, you may have rights over your personal information, including to access, correct, delete, or receive a copy of it, to object to or restrict certain processing, and to withdraw consent. To exercise any of these rights, contact us using the details below. We will respond consistent with applicable law and may need to verify your identity before acting on a request. We will not discriminate against you for exercising these rights.

Additional information for the EEA and UK

If you are in the European Economic Area or the United Kingdom, our processing relies on the legal bases noted above, and you have the rights described in the GDPR/UK GDPR. Where we transfer personal data outside the EEA/UK to a country not recognized as providing adequate protection, we put appropriate safeguards in place, such as Standard Contractual Clauses. You may also lodge a complaint with your local data protection authority.

Your information may be stored and processed in any country where we or our service providers operate, including the United States. These countries may have data-protection rules different from those where you live. Where required, we implement appropriate safeguards for cross-border transfers.

The Services are not directed to individuals under the age of eighteen (18), and we do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, please contact us.

Unless we specifically request it, please do not send us sensitive personal information (such as government identifiers, health data, biometric or genetic data, or information revealing racial or ethnic origin, political opinions, religion, or trade-union membership) through the Services.

The “Last updated” date at the top indicates when this policy was last revised. Changes take effect when we post the revised policy. We encourage you to review it periodically.

GenLayer Foundation is located at Quality Corporate Services Ltd., P.O. Box 712, Suite 102, Cannon Place, North Sound Road, George Town, Grand Cayman KY1-9006, Cayman Islands, and is responsible for the collection, use, and disclosure of your personal information under this Privacy Policy.

If you have any questions about this Privacy Policy, please contact us through our website at internetcourt.org.