Residency Bangalore — Privacy Policy

who we are

we are AadityaTech Residency India Private Limited ("Residency Bangalore", "the residency", "we", "us", "our"), a company incorporated in India with its registered office at 235 Binnamangala, 2nd Floor, 13th Cross Road, Indiranagar, Bangalore North, Bangalore - 560038, Karnataka, India.

Residency Bangalore operates as part of a wider network under a services agreement with The Residency, Inc., a Delaware corporation ("Residency US"). Residency US supports our cohort with brand, platform, and incorporation resources, but AadityaTech Residency India Private Limited is the controller of personal data collected for the Bangalore chapter unless we tell you otherwise.

what we do

Residency Bangalore runs fully funded, in-person residency programmes for deep tech and early-stage founders in Bangalore. Selected founders live and build together for the duration of a cohort, with housing, meals, workspace, and access to our in-house finance, media, and design teams, in exchange for a small equity stake or rent, as set out in our programme terms.

controller

Unless we notify you otherwise, we are the controller of the personal data we process about you. This means we decide what personal data to collect and how to process it.

This notice explains what personal data we collect about you, why, and how long we keep it. It also explains your rights and how to exercise them, and how we handle data in connection with programme applications, resident and founder participation, alumni engagement, events, our website, and newsletters.

If you have questions, contact us using the details in the "how to contact us" section below.

This notice applies to you if you:

visit our website (residencyblr.com)

apply to one of our residency programmes or tracks (for example, the founders track)

are selected as a resident, founder, or member of a cohort

are an alumnus of a Residency Bangalore cohort

attend or apply to attend a demo day or other event we host

sign up to receive newsletters or other promotional communications from us

otherwise interact with Residency Bangalore as an applicant, resident, alumnus, partner, vendor, or ecosystem contact

"personal data" means any information relating to an identified or identifiable individual, whether directly (for example, your name) or indirectly (for example, an online identifier).

"sensitive personal data" (referred to as "special category data" in some jurisdictions) includes information such as financial data, health data, biometric data, and data revealing racial or ethnic origin, religious beliefs, or sexual orientation. Under India's Digital Personal Data Protection Act, 2023 ("DPDP Act"), all personal data we process is treated with appropriate safeguards, and we seek your explicit consent wherever sensitive categories of data (such as financial or health information) are collected.

The personal data we collect depends on our relationship with you. It may include:

applicants: name, contact details, nationality, date of birth, gender, education and employment history, startup/idea details, interests, and, where relevant to programme assessment, banking data

residents and founders: the above, plus emergency contact details, dietary and accessibility needs (for housing and meals), photographs and video taken during the programme, equity/cap table details relevant to our 1% equity arrangement, and incorporation-related information where we assist with US entity formation

alumni: name and contact details, programme outcomes and updates you share with us (for example, fundraising or acquisition news) for alumni features and marketing

website visitors: cookies, IP address, and browsing behaviour on residencyblr.com

newsletter and event sign-ups: name and contact details

partners, vendors, and ecosystem contacts: name, professional details, and communications records

We collect most personal data directly from you: through our application form, in person during the residency, by email or messaging, or via our website.

We may also collect personal data from:

referrals and introductions from our alumni, mentors, or ecosystem partners

publicly available sources, including LinkedIn and other professional networking platforms

our housing, incorporation, and service partners (for example, Zo House for accommodation, or our US partner for Delaware incorporation support), where relevant to delivering the programme

event organisers, where you register for a demo day or similar event through a third party

We only use your personal data where the law allows. Broadly:

programme applicants — name, contact details, nationality, DOB, education/employment, startup details, banking data — used to assess candidates for programme acceptance, on the basis of consent / our legitimate use to run our programme, retained for 3 years from date of application.

residents and founders — the above, plus dietary/accessibility needs, equity details, incorporation data — used to deliver housing, meals, workspace, and programme support, and to manage the equity/rent arrangement, on the basis of performance of our programme agreement with you, retained for the duration of the programme plus 7 years (for financial and equity records).

residents, founders, alumni — photographs and video — used for marketing, our website, alumni features, and social/YouTube content, on the basis of consent, retained until you ask us to stop.

alumni — name, contact details, programme outcomes — used to send updates and promotional material, and feature you in alumni communications, on the basis of our legitimate use to promote our programmes, retained until opt-out.

website visitors — cookies, IP address — used to improve our website and for analytics, on the basis of consent, retained per our cookie settings.

newsletter/event sign-ups — name, contact details — used to send newsletters, invitations, and updates, on the basis of consent, retained until opt-out.

ecosystem contacts, partners, vendors — name, professional details, communications — used for networking, partnerships, business development, on the basis of our legitimate use to operate the Residency Bangalore ecosystem, retained for 3 years from the end of the relationship.

Where personal data is needed to perform our programme agreement with you, we may be unable to offer you a place in the programme without it.

We do not make decisions based solely on automated processing that produce legal or similarly significant effects on you.

We do not sell your personal data. We share it only where needed to run the programme, or where required by law. This excludes disclosures to our affiliates and group companies.

Depending on the circumstances, we may share personal data with:

The Residency, Inc. (Delaware, US), our partner for brand, platform, and incorporation support, under our services agreement

housing and hospitality partners, such as Zo House, who provide accommodation for residents

incorporation and legal service providers, where you opt in to support setting up a US entity

our in-house finance, media, and design teams, and any contracted freelancers or agencies who support programme delivery

payment processors and banking partners, for equity, rent, or vendor payments

event platforms and CRM/communications providers, who help us manage applications and communications

portfolio founders, alumni, mentors, and ecosystem partners, where relevant to networking, introductions, or fundraising support

law enforcement or regulatory authorities, where legally required

another business, if we merge with, are acquired by, or reorganise with another entity

Recipients of personal data may act as independent controllers of that data. Where we use service providers, they are bound by contractual confidentiality and data protection obligations.

Because we work with The Residency, Inc. in the United States (Delaware) and may support residents with US incorporation, your personal data may be transferred to and processed in the United States and other countries outside India.

Where we transfer personal data internationally, we take steps to ensure it receives an adequate level of protection, including through contractual safeguards with the receiving party, such as data processing agreements that require confidentiality and appropriate security measures. We only transfer personal data outside India where permitted under the DPDP Act and any related government notifications.

We maintain reasonable administrative, technical, and organisational safeguards designed to protect personal data against unauthorised access, disclosure, alteration, and loss, as required under the DPDP Act. These measures may include:

access controls and least-privilege principles

encrypted storage and secure data transfer

restricted access to applicant and resident data within our finance, media, and design teams

due diligence on service providers who process data on our behalf

incident response procedures

We may use AI-assisted tools to support internal operations, including application review and summarisation, communications support, and analytics. Where AI-assisted tools are used, outputs remain subject to human review, and we apply reasonable safeguards to protect personal data processed through these tools. We do not use AI to make automated decisions about programme acceptance without human involvement.

Under India's Digital Personal Data Protection Act, 2023, you have the right to:

access: request a summary of the personal data we hold about you and how it is processed

correction and completion: ask us to correct inaccurate or incomplete personal data

erasure: ask us to delete your personal data where it is no longer needed for the purpose it was collected, subject to our legal retention obligations

withdraw consent: withdraw consent at any time for processing based on consent (for example, marketing or photo/video use); we will stop that processing going forward, without affecting what was already done

grievance redressal: raise a grievance with us about how we handle your personal data (see "grievance officer" below), and, if unresolved, approach the Data Protection Board of India

nominate: nominate another individual to exercise these rights on your behalf in the event of your death or incapacity

You generally will not need to pay a fee to exercise your rights. If a request is manifestly unfounded or excessive, we may charge a reasonable fee or decline to act on it, and we will explain why.

We do not currently make decisions based solely on automated processing that significantly affect you.

In accordance with the DPDP Act, we have designated a Grievance Officer to address your questions or concerns about this privacy notice or our handling of your personal data.

To exercise your rights or raise a grievance, contact us at office@residencyblr.com, or write to us at: AadityaTech Residency India Private Limited, 235 Binnamangala, 2nd Floor, 13th Cross Road, Indiranagar, Bangalore North, Bangalore - 560038, Karnataka, India.

Please include your name, contact details, and a description of your concern so we can respond effectively. We may request additional information to verify your identity.

We will acknowledge your grievance and aim to respond within the timelines prescribed under the DPDP Act (generally within a reasonable period, and no later than required by applicable regulations once in force).

If you are not satisfied with our response, you may escalate your complaint to the Data Protection Board of India.

We may update this privacy notice from time to time to reflect changes in our practices or legal requirements. Where required, we will notify you of material changes.

Last updated: September 2026

Contact: office@residencyblr.com

Website: residencyblr.com