← Back to Pillow

Last updated: 17/09/2025

This Privacy Policy explains how TAPE LABS ("we", "us", "our") processes personal data when you visit the Pillow website (the “Site”) and when your company uses Pillow (also referred to as “Vibes”) to conduct conversational user research campaigns with customers (the “Service”). Pillow is a B2B SaaS product.

Who we are

• Controller (Site & operations): For the Site (including sign-ups, waitlist, and support interactions), TAPE LABS acts as the data controller.
• Processor (Service & customer campaigns): For end-user data processed via messaging channels (e.g. WhatsApp, iMessage) during campaigns initiated by a customer, we act as the data processor and the customer is the data controller. We process such data strictly on the customer’s documented instructions.

TAPE LABS – RCS Créteil 925 003 303 14 Avenue du Général de Gaulle, 94160 Saint-Mandé, France Privacy contact: [email protected]

Data we process

• Site/operations (Controller):
  • Sign-up/waitlist email, contact/support requests (and any documents shared)
  • Limited technical/log data (IP address, device/OS/browser, timestamps)
  • High-level operational data to ensure performance and security
  • Strictly necessary and functional cookies only (no analytics/ad cookies by default)
• Service (Processor, on behalf of the customer):
  • End-user identifiers required for messaging (e.g. phone number, name if provided)
  • Conversation content exchanged with our AI agents during campaigns
  • Operational metadata (timestamps, message delivery status, channel identifiers)
  • AI-generated outputs (summaries, insights reports, structured campaign results)

Purposes and legal bases

• Site/operations (Controller):
  • Pre-contractual and contractual purposes (responding to inquiries, managing accounts)
  • Legitimate interests (security, abuse prevention, product reliability and improvement)
  • Consent where required (e.g. waitlist/marketing communications)
• Service (Processor):
  • Providing, securing, and operating the Service under the customer’s instructions.
  • The customer, as controller, determines its own legal bases for contacting end-users and processing their responses.

Cookies

We use only strictly necessary and functional cookies to operate the Site and ensure a smooth user experience. We do not use analytics or advertising cookies on the public landing page. See our Cookies Policy for details.

Vendors and disclosures

We use vetted sub-processors solely to provide the Site and Service, including (but not limited to):

• Hosting & infrastructure: Google Cloud Platform (EU)
• Messaging & delivery: Twilio / Meta Business Messaging APIs / Apple Business Chat (depending on customer campaigns)