AQpay Pagamentos

AQpay Pagamentos lets any WooCommerce store — in Brazil or abroad — accept the payment methods Brazilian shoppers use most: Pix, boleto and local credit cards with installments. Settlement is in Brazilian Reais (BRL) to your AQpay account.

• Credit card with mandatory 3D Secure, up to 21 installments and Google Pay. Card data is encrypted in the shopper’s browser and never reaches your store.
• Pix with QR Code and copy-and-paste code, with automatic confirmation.
• Registered boleto with digitable line and PDF.
• Works with both the classic checkout and the block checkout.
• Interface in English, with a full Brazilian Portuguese (pt_BR) translation included.

Requirements

• Store currency set to Brazilian Real (BRL) and site served over HTTPS (SSL).
• For boleto, the checkout must collect the full address including postal code (CEP).
• If your store uses a Content Security Policy (CSP), allow: script-src https://js.evervault.com; connect-src https://app.aqpay.com.br https://keys.evervault.com https://api.evervault.com https://api.rinne.com.br https://api-sandbox.rinne.com.br; frame-src https://ui-components.evervault.com https://pay.google.com.

External services

This plugin relies on the following external services:

• AQpay API (https://app.aqpay.com.br) — creates and checks payments (card, Pix and boleto). Order amount, order reference and payer name, document (CPF/CNPJ), email and address are sent when a payment is created, and the payment ID is sent when its status is checked. Terms of use: https://app.aqpay.com.br/legal/conta-pf — Privacy policy: https://app.aqpay.com.br/legal/privacidade
• Rinne payment API (https://api.rinne.com.br) — payment processor used by AQpay to authorize card payments with 3D Secure. The encrypted card token, amount and installments are sent when the shopper confirms the payment. Rinne acts as a subcontracted processor of AQpay; the contract is between the store and AQpay, so the applicable terms and privacy policy are the AQpay ones linked above.
• Evervault (https://js.evervault.com) — PCI-certified card encryption service. The card fields are rendered by Evervault only on the order payment page, so the card number and CVV are encrypted in the shopper’s browser and never reach your store or our servers. Terms of use: https://evervault.com/legal/terms — Privacy policy: https://evervault.com/legal/privacy
• Google Pay (https://pay.google.com/about/terms/) — optional digital wallet for card payments, loaded only on the order payment page.

Source code of bundled libraries

• assets/js/aqpay-sdk.min.js — AQpay card SDK (minified, MIT). The unminified source is available on request; we can also publish it in a public repository once the plugin is approved.
• assets/js/qrcode.min.js — qrcodejs by davidshimjs (MIT license), source at https://github.com/davidshimjs/qrcodejs
• assets/js/aqpay-card.js, assets/js/aqpay-status.js, assets/js/aqpay-blocks.js — plugin’s own scripts, shipped unminified.