PrivacyARC Overview
PrivacyARC is privacy infrastructure on Arc Chain. It makes stablecoin settlement confidential by construction — FHE-encrypted balances, ZK-shielded transfers, and relay origin protection — and exposes it through two payment surfaces: Private Pay for people, and Agent Rails for machines.
The same confidential settlement core serves both consumers and autonomous agents. People pay by phone number; agents pay by x402. Neither exposes balances, counterparties, or origin on-chain.
What PrivacyARC is
PrivacyARC is a privacy layer for USDC settlement on Arc Chain. Balances are stored as FHE ciphertexts (euint64) so amounts are never public, transfers settle through a ZK shielded pool with commitments and nullifiers, and a relay network strips transaction origin. The result: stablecoin payments that behave like cash — final, programmable, and private.
What you can do today
Pay any phone number. The recipient gets an SMS claim link — no app, no seed phrase, no gas. Funds sit in an SMS escrow contract until claimed or refunded.
Issue an ERC-4337 agent passport with hard spend caps enforced on-chain, an ERC-8004 identity and reputation, and a kill switch you control.
Your USDC balance is an FHE ciphertext. Only you can decrypt it with your wallet key — the chain stores ciphertext, never cleartext amounts.
Transfers move through a ZK pool: deposit public, move privately with commitments and nullifiers, withdraw to a fresh address.
Product hierarchy
- Privacy infrastructure — the FHE + ZK + relay core. Everything else is built on it.
- Private Pay — the consumer product: phone-number payments, claim links, pay links, withdrawals.
- Agent Rails — the extension: private x402 payments, ERC-8004 identity/reputation, ERC-4337 passports with hard caps.
Private Pay
Send USDC to any phone number. The recipient claims from an SMS link — wallets optional, privacy default.
How a payment works
- Prepare — enter a phone number and amount in the Dashboard. The number is salted and hashed (
phoneHash); the cleartext number never touches the chain. - Choose a privacy tier — Full, Semi, or Standard (see below).
- Review — confirm amount, tier, and escrow terms. You sign one transaction.
- Lock — USDC moves into the SMS escrow contract against the
phoneHash. - Claim — the recipient gets an SMS with a claim link, verifies possession of the number, and withdraws to any wallet — or to a fresh embedded wallet created on the spot.
- Refund — if the payment is never claimed, you can refund it back to your own balance after the escrow window.
Privacy tiers
| Tier | Balance | Transfer path | Origin |
|---|---|---|---|
| Full | FHE-encrypted | ZK shielded pool | Relay-protected |
| Semi | FHE-encrypted | ZK shielded pool | Direct submission |
| Standard | FHE-encrypted | Confidential transfer | Direct submission |
Every tier keeps balances encrypted. Higher tiers add shielded-pool routing and relay origin protection for the transfer itself.
Pay links
Create a one-time link for a fixed amount and share it anywhere. The payer opens the link, reviews, and settles. Unclaimed links auto-refund after 7 days.
Withdrawals
Move USDC from your encrypted PrivacyARC balance back to any public Arc address. Withdrawals from the shielded pool go to a fresh address you choose, preserving the privacy gained inside the pool.
Agent Rails
An extension of the privacy core for autonomous agents: private x402 settlement, portable identity and reputation, and hard on-chain spend limits.
Private x402 payments
x402 is the HTTP-native payment handshake: a service responds 402 Payment Required, the agent pays, and retries with proof. PrivacyARC settles x402 payments through the same confidential core, so an agent's payment graph — what it buys, from whom, how much — stays private.
ERC-8004 identity & reputation
Each agent registers an ERC-8004 identity: a portable, on-chain handle that accumulates reputation from completed private settlements. Counterparties can check standing without seeing payment contents.
ERC-4337 agent passports
An agent passport is an ERC-4337 smart account issued to an agent, controlled by your session keys and bounded by hard spend caps enforced on-chain — per-transaction, per-day, and per-counterparty. Caps are contract-enforced, not policy-enforced: the agent cannot exceed them even if its own logic is compromised.
Kill switch
Every passport has an owner-controlled kill switch. Revoking it freezes the agent's ability to transact immediately, on-chain, without touching the agent's runtime.
Using the SDK
import { PrivacyARCAgent } from "@privacyarc/sdk";
const agent = new PrivacyARCAgent({
passport, // ERC-4337 smart account with hard caps
sessionKey, // scoped session key for the agent runtime
});
// Private x402 fetch — pays confidentially, respects caps
const res = await agent.fetch("https://api.example.com/paid-endpoint");SDK access is rolling out with the Agent Rails testnet phase. The Dashboard's AI/x402 terminal shows configuration-required states until contracts are configured.
Testnet Guide
PrivacyARC is live on the Arc public testnet. Everything you can do on testnet today, and how to try it.
Network details
| Network | Arc Testnet |
| Chain ID | 5042002 (0x4cef52) |
| Gas token | USDC (native, stablecoin-denominated fees) |
| Account model | ERC-4337 first-class account abstraction |
The Connect Wallet button in the navigation adds or switches to Arc Testnet automatically in MetaMask.
What to test
- Private Core — encrypt a balance, send a shielded transfer, withdraw to a fresh address.
- Consumer Reach — send a phone-number payment, claim it from the SMS link flow, refund an unclaimed payment.
- Privacy tiers & relay — compare Full / Semi / Standard on the same payment.
- Agent Rails preview — create a passport, set hard caps, preview a private x402 settlement in the terminal.
Where contracts are not yet configured for a surface, the Dashboard shows explicit testnet or configuration-required states. Nothing on testnet is a live mainnet transaction, and the interface never presents one as such.
Mainnet Transition
Arc public mainnet launches September 16, 2026. PrivacyARC's roadmap is staged so every layer is proven on testnet before it settles real value.
Roadmap
- Private Core — FHE confidential balances, ZK shielded settlement, and the PARC fee flywheel.
- Consumer Reach — SMS escrow, claim links, pay links, and refunds.
- Privacy Tiers & Relay — Full / Semi / Standard tiers with relay origin protection.
- Agent Rails — private x402, ERC-8004 identity, ERC-4337 passports.
- Arc Mainnet Launch — September 16, 2026.
What changes at mainnet
The same contracts and the same interfaces move from chain 5042002 to Arc mainnet (5042). Testnet state does not carry over: balances, escrows, and passports are re-initialized on mainnet. The Dashboard will prompt a network switch at launch and clearly label which network you are on at all times.
PARC fee flywheel
Protocol fees route to the PARC flywheel: buyback, burn, and rewards for the privacy core's usage. Fee parameters are published with the mainnet configuration.
Architecture
Four contracts and a relay network, composed into one confidential settlement core on Arc Chain.
Components
| Layer | Component | Role |
|---|---|---|
| Confidential token | FHE token (euint64, TFHE) | Balances stored as ciphertext; arithmetic on encrypted values |
| Shielded pool | ZK pool (commitments / nullifiers, Noir / Circom) | Unlinkable transfers with deposit–move–withdraw flow |
| Origin | Relay network | Strips submitter identity from transactions |
| Consumer escrow | SMS escrow (salted phoneHash) | Lock / claim / refund for phone-number payments |
| Agent accounts | ERC-4337 passports + session keys | Hard spend caps, kill switch, scoped keys |
| Agent identity | ERC-8004 registry | Portable identity and reputation |
| Infra | The Graph · LayerZero · Turnkey | Indexing, messaging, embedded wallets |
Chain configuration
| Chain IDs | Mainnet 5042 (0x13b2) · Testnet 5042002 (0x4cef52) |
| Gas | USDC — stablecoin-denominated, predictable fees |
| Compatibility | EVM-compatible Layer-1 built for stablecoin finance |
Security & audits
Contract audits are scheduled per the roadmap, ahead of the September 16, 2026 mainnet launch. Audit reports will be linked here as they are published.
FAQ
Do recipients need a wallet to receive a payment?
No. You send to a phone number; the recipient gets an SMS claim link and can withdraw to any wallet, or have an embedded wallet created for them at claim time. No app, no seed phrase, no gas for the recipient.
What does "FHE-encrypted balance" actually mean?
Your balance is stored on-chain as a fully homomorphic encryption ciphertext (euint64). The contract computes on ciphertexts, so amounts are never public — only you can decrypt your balance with your key.
What's the difference between the privacy tiers?
All tiers keep balances FHE-encrypted. Semi adds ZK shielded-pool routing for the transfer. Full additionally submits through the relay network, protecting transaction origin.
What stops an agent from overspending?
Hard spend caps written into its ERC-4337 passport: per-transaction, per-day, and per-counterparty limits enforced by the contract itself — plus an owner-controlled kill switch that freezes the passport on-chain.
Is testnet value real?
No. Arc Testnet (chain 5042002) uses test USDC. The Dashboard labels testnet state explicitly and never presents testnet actions as live mainnet transactions.
When mainnet?
Arc public mainnet launches September 16, 2026. PrivacyARC's five roadmap phases complete with that launch.
Open the Dashboard to send your first private payment on Arc Testnet.