DMpact — AI Commerce Shield for Creator DMs

DMPact Dashboard

Inspiration

"I love the preview, I'll pay the rest tomorrow!"
In freelance commissions, that is the single most dangerous sentence a creator can hear.

Independent creators—including digital artists, Live2D riggers, vocal mixers, and video editors—often manage commissions through informal direct messages on platforms such as Discord, Instagram, and X.

Our team investigated public creator communities (r/Artists, r/ArtistLounge, r/artbusiness, r/VirtualYoutubers, and r/Live2D) to understand why so many talented freelancers struggle financially:

The "I'll Pay Tomorrow" Trap & Ghosted Balances: Creators frequently accept minimal or no upfront deposits. After weeks of hard work and preview deliveries, clients simply disappear, leaving creators with zero recourse (Case Study: r/Artists).
Uncontrolled Scope Creep & Revision Hell: Informal DMs rarely specify revision boundaries or commercial licenses. Creators get trapped doing days of unpaid work under the threat of negative reviews (Case Study: r/ArtistLounge).
The Digital Chargeback Nightmare: When rogue buyers file "unauthorized transaction" claims on PayPal, creators lose both their digital art and their money because informal chat screenshots fail merchant dispute requirements (Case Study: r/artbusiness).

Traditional freelance platforms (Fiverr, Upwork) charge punishing 10%–20% platform fees and force clients into cumbersome account registration funnels that kill casual commission conversions. Creators refused to leave their DMs.

We built DMpact to solve this: **an AI-powered commerce shield that brings institutional-grade payment protection and automated contract guardrails straight into informal chat DMs—without making clients create an account or taking high platform fees.

What it does

DMpact turns chaotic, multi-lingual chat DMs into locked agreements and staged PayPal invoices through a seamless 7-step autonomous commerce loop:

Instant DM Extraction: Creators paste raw chat logs (in English, Indonesian slang, or Japanese VTuber terminology). Using Google Gemini 3.5 Flash, DMpact extracts structured commercial terms: service type, deliverables, total price, currency, revision limits, deadline dates, and commercial usage rights.
Deterministic Ambiguity Guardrails: The engine scans for missing or dangerous terms (such as vague deadlines like "ASAP", unmentioned revision caps, or unsupported currencies like IDR). Ambiguities are flagged as actionable Blockers (which prevent sending until clarified) or Warnings with recommended clarifying questions.
Autonomous Negotiation Shield (Counteroffers): If a client lowballs the creator's base rate card by more than 20%, Gemini automatically drafts three professionally phrased, assertive counteroffers:
- Scope Reduction: Keep the client's budget by removing extra stems/revisions.
- Price Adjustment: Propose the fair market rate based on the creator's saved rate card.
- Milestone Split: Preserve scope while breaking payments into staged deliverables.
Zero-Login Client Agreement Portal: The client receives a clean, tokenized mobile review link (/a/[token]). With zero sign-up required, they review clear deliverables, confirm terms, and immediately trigger PayPal checkout.
Staged PayPal Invoicing v2: DMpact automatically calls the PayPal Invoicing REST API to generate a formal 50% Deposit Invoice. Through real-time PayPal Webhooks (INVOICING.INVOICE.PAID), the creator's dashboard flips to Deposit Paid instantly—authorizing work to safely begin.
Cryptographic Delivery Vault & Balance Trigger: When the creator finishes the work, they upload the final master file. DMpact calculates an immutable SHA-256 cryptographic hash and timestamp, securely vaults the delivery, and automatically dispatches the final 50% balance invoice. The client cannot unlock the unwatermarked file until the balance invoice is paid.
AG Grid Pipeline & Dispute Evidence Pack: Creators manage their entire commission pipeline inside an enterprise-grade AG Grid interface with real-time revenue summaries, deadline countdowns, and payment badges. If a dispute or chargeback ever occurs, creators can generate a tamper-evident Dispute Evidence Pack PDF with one click, binding the signed agreement, chat audit logs, file delivery hashes, and PayPal transaction IDs into airtight merchant defense.

How we built it

DMpact is built as a production-grade full-stack modern web application:

Full-Stack Framework: Next.js 15 (App Router, Server Actions, React 19) styled with Tailwind CSS, Base UI, and Lucide Icons.
Database & Infrastructure: PostgreSQL deployed on Neon serverless database branching with connection pooling and session auth cookies.
AI Engine & Prompt Architecture:
- Google Gemini 3.5 Flash (@google/genai SDK) running optimized structured extraction prompts (extract-v3).
- Strict Zod schema validation enforcing contract invariants, money decimals, and deterministic date calculations.
- Multi-option negotiation engine and context-aware payment reminder nudge generator.
PayPal Commerce Integration:
- PayPal Invoicing v2 API (/v2/invoicing/invoices): programmatic draft creation, invoice dispatching, metadata attachment, and automated reminder triggers (/remind).
- PayPal Webhooks API (POST /api/webhooks/paypal): real-time event listener subscribed to INVOICING.INVOICE.PAID and INVOICING.INVOICE.CANCELLED.
- Cryptographic Signature Verification: Raw-payload byte preservation sent to /v1/notifications/verify-webhook-signature preventing webhook spoofing.
- Dual-Layer Synchronization: Resilient fallback polling (/api/commissions/[id]/status) and manual refresh endpoints to guarantee invoice state consistency even during sandbox network drops.
Pipeline Visualization: AG Grid Community 36.3.0 (ag-grid-react) utilizing custom cell renderers, dynamic status filtering, keyboard navigation, and client-side aggregations for revenue tracking.
Cryptographic Evidence & Dispute Protection: Client-side & server-side SHA-256 checksum logging via Web Crypto API, compiled into standardized PDF evidence packs with @react-pdf/renderer.

Challenges we ran into

Unstructured Slang & Multilingual Chat Parsing: Creators deal with messy, emoji-filled DMs combining English, Indonesian colloquialisms ("kak", "DP 50%", "revisi santai"), and Japanese VTuber terms ("illust", "stems", "debut stream"). Standard regex fails completely. We engineered custom system prompts with few-shot reasoning that extract strict numerical values and convert relative dates (e.g. "next Friday" or "before debut on the 25th") into verified ISO dates.
PayPal Sandbox Webhook Verification & Byte-Level Serialization: PayPal's /v1/notifications/verify-webhook-signature requires the exact raw byte string received over HTTP. If Next.js parses and re-stringifies the JSON body, whitespace or key reordering causes verification failure (401 Unauthorized). We built a custom raw-buffer middleware extractor that forwards untouched payload bytes alongside headers (transmission_sig, cert_url, auth_algo).
Balancing Generative AI with Strict Financial Determinism: LLMs can hallucinate payment splits or deliverable quantities. We solved this with a zero-trust post-check pipeline: Gemini outputs structured JSON, which is validated by Zod schemas, cross-checked against creator rate cards with deterministic threshold math, and guarded by blocker flags that physically disable invoice generation until all ambiguities are cleared by a human.

Accomplishments that we're proud of

Verified Eval Harness (100% Key Field Accuracy): We didn't just test by hand; we engineered an automated evaluation harness across 21 complex fixture DMs (evals/results/extract-v3-gemini-3.5-flash-lite-medium.json):
- 100% Key Field Accuracy (210 / 210 critical fields across pricing, deliverables, currencies, and deadlines).
- 99.34% Overall Field Accuracy (300 / 302 schema attributes matched).
- 100% Ambiguity Recall (flagged every single seeded missing term, vague deadline, and unsupported currency).
- 91.67% Ambiguity Precision with an average latency of ~5.4 seconds.
Under-60-Second Real-Time Sandbox Lifecycle: A creator can paste a 20-line chat log, fix one flagged ambiguity, send a mobile link to a client, receive a PayPal sandbox payment, and see their live AG Grid queue update via webhooks—all in under one minute.
Zero-Login Client Experience: Clients never have to sign up for DMpact. They open a tokenized link, verify the deliverables, and pay through PayPal. No friction, no abandoned transactions.
Dispute-Proof Delivery Vault: By hashing delivered assets (SHA-256) and logging them before balance collection, we provide freelancers with institutional-grade proof against "item not received" claims.

What we learned

Meet Users Where Commerce Actually Happens: Creators don't want another walled-garden freelance platform. They want lightweight, intelligent financial guardrails injected directly into their existing chat channels.

Agentic Commerce Demands Strict Determinism: Generative AI is phenomenal for conversational extraction and polite negotiation drafts, but financial state transitions must be locked to cryptographic verifications and reliable payment webhooks.
PayPal Invoicing v2 is an Unsung Powerhouse: Beyond simple checkout buttons, PayPal Invoicing provides complete lifecycle auditing (metadata, itemized deliverables, automatic reminders, dispute integration) perfectly suited for autonomous commerce workflows.

What's next for DMpact — AI Commerce Shield for Creator DMs

Discord Bot & Twitter/X Extension: Bringing DMpact directly into chat interfaces with a /dmpact contract command or browser extension overlay.
Direct PayPal Disputes API Integration: Automatically packaging and uploading the PDF Evidence Pack directly to PayPal's Resolution Center whenever a buyer dispute is initiated.
Multi-Stage Studio Escrow Workflows: Supporting multi-creator milestone payouts for indie animation studios, VTuber agencies, and game development teams.