Private Payments
Protected From Everyone
UmbraPay protects you from the people running the product — not just from the chain. Three levels of visibility, cryptographically enforced: the public sees transactions, the org sees totals, only granted auditors see individual breakdowns.
Three levels of visibility · Cryptographically enforced · Revocable auditor access
Ops Visibility
Treasury coverage
Coverage Ratio
142%
Stablecoin treasury vs outstanding private invoices
Public Treasury
$84,200
GoldRush balances_v2 snapshot
Outstanding Private
$59,300
Umbra invoices pending settlement
Reconciled
12 / 12
Paid invoices tied to on-chain tx via GoldRush
How the tracks merge
Every GoldRush integration is a visible feature, not background logging. Every Umbra integration stays on the privacy rail.
Umbra
Private Payment Links
Shareable URLs and QR codes that collect into encrypted UTXOs. Receivers claim without ever revealing balances or addresses.
Umbra
Private Invoicing
Invoices with line items, memos, and due dates. Payers generate a ZK proof in-browser to settle without on-chain exposure.
Umbra
Compliance Grants
Issue and revoke viewing-key grants to auditors. Selective disclosure with an on-chain audit trail.
Umbra + GoldRush
Treasury Coverage Ratio
Outstanding private invoices priced against public stablecoin treasury. Operators see funding risk before it materializes.
Umbra + Solana RPC
Settlement Reconciliation
Every paid invoice carries a tx signature. The Ops page resolves each one against the Solana RPC cluster the rail runs on and attaches a 'Reconciled' badge with slot, block time, fee, and success.
Privacy that protects you from the product itself
Most "private" payment apps can still see your data internally. UmbraPay can't. The org admin runs payroll without seeing individual salaries. The operator monitors treasury without seeing payment details. Only auditors with time-limited, revocable grants can view the full breakdown.
3
Privacy Levels
0
Internal Data Exposure
On-chain
Audit Trail