Last updated: 9 July 2026
Privacy Policy
This policy explains what data we process in connection with the Zureq website and services, and on what basis.
Disclaimer of liability
Zureq provides only a technical layer (infrastructure) that routes transactions to licensed payment providers. Zureq is not a bank, a payment institution or a financial intermediary, and does not execute payments itself. The service is provided “as is”, without warranties of any kind. To the fullest extent permitted by law, Zureq accepts no liability whatsoever for any damages — direct, indirect, incidental or consequential — arising from use of the service, from transactions initiated by AI agents, or from the conduct of payment providers, stores or any third party. The entire risk of using the service rests with the user.
01Data controller
The data controller is Zureq. For any data-protection matters, contact us at [email protected].
02Data we process
We process technical data required to provide the service (e.g. transaction identifiers, AP2 consent metadata) and contact details you provide voluntarily. We do not store payment-card data — it goes directly to licensed payment providers.
03Purposes and legal bases
We process data to provide the service (Art. 6(1)(b) GDPR), to meet legal obligations (Art. 6(1)(c)) and in our legitimate interest, such as security (Art. 6(1)(f)).
04Recipients
Data may be shared with licensed payment providers (e.g. PayU, Przelewy24 / PayPro S.A.) and IT infrastructure providers, only to the extent necessary to provide the service.
05Your rights
You have the right to access, rectify, erase, restrict and port your data, to object, and to lodge a complaint with the supervisory authority.
06Retention
We keep data for as long as necessary to fulfil these purposes and for any period required by law.
06FAQ
Frequently asked questions
ZUREQ is the infrastructure layer between AI agents and stores. We plug into your existing store, expose your catalog in the protocols agents understand (MCP and UCP), verify the customer's signed consent per AP2, then route the payment to a licensed provider and bind it to the order.
The customer tells an agent what they want and signs a consent. The agent queries your store over MCP. ZUREQ verifies the consent, the cart and the amount, routes the payment to a provider, writes the order into your store and issues receipts for both sides.
Inside the chats they already use. WhatsApp and our web chat are live today, and we are implementing Telegram and Instagram next. One integration covers every channel.
Every consent is cryptographically signed per the AP2 standard, and every store gets its own signing key. The amount, cart and payee must match, and the same payment can't clear twice. No card data reaches your store.
BLIK through PayU and Przelewy24, plus Stripe, with more providers on the way. The customer pays with a method they already know, and the money lands in the same account it does today.
A flat monthly subscription per store, plus a small fee of about 1.5% on each transaction that runs through ZUREQ. We confirm exact terms during the demo.
ZUREQ runs as a layer in front of your store, so you don't touch your checkout. Adapters for WooCommerce and Shoper are live, a REST API covers custom builds, and more platforms are on the way. Each store gets its own endpoint, key and payment configuration.
AP2 (Agent Payments Protocol) is an open standard for purchases made by AI agents, developed by Google with dozens of payments partners. It defines the signed consents and receipts that let a store verify a purchase before accepting payment.
No. ZUREQ is infrastructure. Payments are processed by licensed providers (PayU, Przelewy24 / PayPro S.A., Stripe). We verify the consent, bind the payment to the cart and hand the transaction off.
Put your store on the routeAI agents already travel.
We'll walk the whole route on your catalog: from the customer's message, through consent and verification, to the payment and the order in your system.
Create accountNo card data on your side. A test store in minutes. Hosted in the EU.