Direct UPI Security & Payment Lock Vault

Payment does not traverse third-party aggregator escrow wallets. Dynamic QR codes encode your studio VPA, amount, and transaction reference directly for instant T+0 bank account credit with zero gateway cuts.

Eliminates fake payment screenshots without client friction. Clients simply attach their UPI payment receipt; you verify the credit in your bank app or SMS and tap Approve to unlock high-res client galleries in real-time.

Database writes execute inside PostgreSQL atomic transactions (`db.transaction`) with `SELECT FOR UPDATE` locks on booking dates and milestone balances, preventing race conditions.

High-res master images are stored encrypted with AES-256 in Cloudflare R2. Watermarked previews stream through server-side Sharp caches, while full 4K downloads require cryptographic time-bound HMAC presigned URLs.