Last updated: 9 July 2026
Data Processing Agreement
This document sets out how personal data is processed between the User (controller) and Zureq (processor) in connection with the Service.
Disclaimer of liability
Zureq provides only a technical layer (infrastructure) that routes transactions to licensed payment providers. Zureq is not a bank, a payment institution or a financial intermediary, and does not execute payments itself. The service is provided “as is”, without warranties of any kind. To the fullest extent permitted by law, Zureq accepts no liability whatsoever for any damages — direct, indirect, incidental or consequential — arising from use of the service, from transactions initiated by AI agents, or from the conduct of payment providers, stores or any third party. The entire risk of using the service rests with the user.
01Subject and purpose
Zureq processes personal data only for the purpose and to the extent necessary to provide the Service, on the controller's documented instructions.
02Scope of data
Processing covers technical transaction data and consent metadata needed to route the payment. Zureq does not process payment-card data.
03Processor obligations
Zureq applies appropriate technical and organisational measures, ensures confidentiality and assists the controller with its GDPR obligations.
04Sub-processing
Zureq may use sub-processors (e.g. payment providers and IT infrastructure). A current list of sub-processors is available on request.
05Security and incidents
Zureq notifies the controller of personal-data breaches without undue delay and assists in handling them.
06Liability
To the fullest extent permitted by law, Zureq's liability under this processing arrangement is excluded; all risk and responsibility towards data subjects remains with the controller.
06FAQ
Frequently asked questions
ZUREQ is the infrastructure layer between AI agents and stores. We plug into your existing store, expose your catalog in the protocols agents understand (MCP and UCP), verify the customer's signed consent per AP2, then route the payment to a licensed provider and bind it to the order.
The customer tells an agent what they want and signs a consent. The agent queries your store over MCP. ZUREQ verifies the consent, the cart and the amount, routes the payment to a provider, writes the order into your store and issues receipts for both sides.
Inside the chats they already use. WhatsApp and our web chat are live today, and we are implementing Telegram and Instagram next. One integration covers every channel.
Every consent is cryptographically signed per the AP2 standard, and every store gets its own signing key. The amount, cart and payee must match, and the same payment can't clear twice. No card data reaches your store.
BLIK through PayU and Przelewy24, plus Stripe, with more providers on the way. The customer pays with a method they already know, and the money lands in the same account it does today.
A flat monthly subscription per store, plus a small fee of about 1.5% on each transaction that runs through ZUREQ. We confirm exact terms during the demo.
ZUREQ runs as a layer in front of your store, so you don't touch your checkout. Adapters for WooCommerce and Shoper are live, a REST API covers custom builds, and more platforms are on the way. Each store gets its own endpoint, key and payment configuration.
AP2 (Agent Payments Protocol) is an open standard for purchases made by AI agents, developed by Google with dozens of payments partners. It defines the signed consents and receipts that let a store verify a purchase before accepting payment.
No. ZUREQ is infrastructure. Payments are processed by licensed providers (PayU, Przelewy24 / PayPro S.A., Stripe). We verify the consent, bind the payment to the cart and hand the transaction off.
Put your store on the routeAI agents already travel.
We'll walk the whole route on your catalog: from the customer's message, through consent and verification, to the payment and the order in your system.
Create accountNo card data on your side. A test store in minutes. Hosted in the EU.