Privacy Policy

Last updated: December 20, 2023 | Effective date: January 1, 2024

At Asana, we share a common mission. We’re committed to protecting your privacy so you can focus on the work that matters most to your business.

This privacy statement describes how Asana processes your information and explains the choices you have regarding your information. To learn more about Asana’s commitment to privacy, read our Privacy Policy .

 If you have any questions or concerns about how Asana handles your information or about this Privacy Statement, you can contact us at any time by emailing  privacy@asana.com . You can  view previous versions of this Privacy Statement in the section titled “Old Privacy Statement.”

What’s changed in this update

It is important to us that you have a clear understanding of how we process your information and what rights you have under privacy and data protection laws. We have updated our privacy statement to include new disclosures about the EU-US Data Privacy Framework (DPF) initiative, the UK extension to the EU-US DPF, and the Swiss-US Data Privacy Framework.

It is important to us that you have a clear understanding of how we process your information and what rights you have under privacy and data protection laws. We welcome any questions, concerns or feedback you may have regarding updates to this privacy statement. You can also  view the old privacy statement here .Privacy Information for California Residents

Our relationship with youInformation we processHow we use your informationHow we disclose your informationProtect, store, transmit and retain your informationOther important informationYour privacy rightsPrivacy Information for California ResidentsChanges to our privacy statementContact us and privacy issuesOld privacy statement

Our relationship with you

If our users are covered by our Subscriber Agreement , Business Master Services Agreement, or other master services agreement for use of Asana services, Asana is a processor/service provider (processing personal data on behalf of the controller or at the direction of the controller) suppliers, or other similar designations as required by law), our customer (usually a company or organization) is the controller/company (i.e. the entity that decides how and why the information is processed) and is responsible for processing through its use Asana and information provided to Asana. In all other respects, Asana is the controller of information.

For example, if you use

  • Use your company email address to create an account. Your company is the controller of your Asana domain and the information it stores.
  • If you are using a free email domain (such as gmail.com) or a personal email account, Asana is the controller.

Asana can be used by companies or individual users:

If you are using Asana through your company, educational institution, or using your company email address, the Asana administrator for your company or educational institution is responsible for managing accounts associated with that company or institution and can: Restrict, Suspend rights, or terminate your access or ability to use the Services, access information about you, access or retain information we store (including the content of your workspace and records of your use of Asana), and restrict your ability to edit , restrict, modify or remove information related to the use of our products and services.

Information we process

Asana processes information received directly from you, collected automatically when you use Asana or visit our website, and collected by Asana through third parties. However, please note that this Privacy Statement does not apply to the processing of your information by third parties through any third-party integration provided through your use of our Services. Please visit those third-party websites directly for more information about their privacy and data protection practices.

Information Asana receives directly from you

Information needed to create an account

This includes setting up your account and managing the information you need to log in and out of Asana:

  • Identifiable information, including name and email address
  • Your Asana password (hidden), please create a long, strong and unique password
  • Information about third-party verification identity providers (such as Google Authenticator)

If you upgrade your account to a paid account, Asana will collect:

  • Billing information, including name, address, and phone number
  • Financial information, including credit card or bank account information collected by our payment processor on our behalf
  • Information about your chosen Asana plan

Information you provide to us through your use of Asana

  • Information you provide in goals, portfolios, projects, messages, tasks and other Asana features
  • Information uploaded to Asana, such as attachments
  • Your   email information forwarded to x@mail.asana.com
  • Profile photo and other information you provide to describe yourself, which we only collect if you choose to provide it, such as your gender identity
  • Video and audio files, and transcripts of such files (if you use video messaging)
  • Career or employment information, which may include your title or position at the company (if you choose to provide this information)
  • Any other information that identifies you or can be reasonably linked to you that you choose to provide when you use Asana

Other information you may provide to us when you otherwise interact with Asana

If you interact directly with Asana employees, such as in our sales, user research, or user operations groups, or if you become an Asana Ambassador , or if you participate in research conducted by the Asana Work Innovation Lab , Asana may process the information you voluntarily provide below. :

  • Requests, questions and responses you submit to us via forms, emails or otherwise
  • Information related to Asana sweepstakes, contests or research trials (if you choose to participate)
  • Information used to verify your identity
  • Geographic information, such as regions and countries
  • Social media information
  • your date of birth
  • Biometric information related to call data, with your consent in accordance with applicable law

Information processed automatically when you visit our website or use our mobile or desktop applications

Information related to your use of Asana and our website

We may also collect the following information:

  • Metadata and inferred information related to your use of Asana, our websites and third-party integrations to provide a deeper understanding of how you work at Asana. We may record the activities you perform when using Asana, including but not limited to the number of Asana workspaces you are working in, the number of tasks you are assigned, the tasks or other functions you view, when you remove tasks or leave messages, you the features and embedded content you interact with, the types of files you send, and any third-party integrations you use (if any).Internet activity, cookies and similar tracking technologies, including information automatically recorded by our servers, including your web request, IP address, browser type and settings, referring/leaving pages and URLs, number of clicks, date and timestamp information, language preferences and other such information. Please visit the Cookie Notice for more information about the types of information we collect through cookies, including advertising and analytics information, and how we use this information. To manage your cookie settings, you can make adjustments in the Cookie Preference Center here: Change settings
  • Information collected from participating in beta testing, such as bug reports or feedback you provide
  • Information about how you interact with our marketing sites (such as asana.com), such as where you click, how long you spend on the page, your scrolls, mouse-overs and other data to help us understand you better experience and provide you with the best user experience
  • Device information and activity when using Asana via your mobile device, including the device type, device ID, operating system version, and mobile network information you are using to ensure we provide you with the correct application version
  • Derived device geolocation information, including approximate geolocation inferred from the IP address

Information Asana receives from other sources

From time to time, Asana will receive information about you from third parties (other people, marketing services, third-party integrations), which may include:

  • Information you set up with Asana and integrated from third parties . For example, a third-party integration may allow us to access information stored with that third party, which Asana will process to facilitate the integration
  • Name, email and business contact information
  • Information about you provided to us by other Asana individuals or users

How we use your information

Asana uses your information to operate our products and services, communicate with you, process transactions when you change your Asana plan, promote security and fraud prevention, and comply with the law. Specifically, we may process your information to:

To provide you with services and operate our business

  • Maintain, provide and improve our products and services
  • Suggest Asana Help Center articles that may be relevant to you
  • Analyze and study how you interact with websites and apps
  • Protecting Asana protects you too, such as:
    • Protect our systems and products from fraud or unauthorized activity
    • Identify, troubleshoot and correct errors
    • Comply with global laws and regulations
  • To investigate in good faith suspected violations of user terms of service
  • Comply in good faith with legally binding subpoenas, requests or other legal procedures that are consistent with our law enforcement policies  , or where the Company deems it necessary to comply
  • If you use Asana as part of an organization, company or academic institution, Asana will process your information in accordance with our contract with your organization or academic institution. The terms of these contracts may be used for different purposes than those described in this privacy statement, and if there is any conflict with each other, their priority will be higher.

In addition, we use information related to your use of Asana, account information (which may include your email address and name), and information related to third-party integrations to:

  • Communicate with you:
    • Discuss Asana-related matters via phone, text, email or text chat
    • Provide important notices and updates, product changes, and other necessary notifications such as security and fraud alerts
    • Marketing of Asana services to you via email, phone and mail. You can unsubscribe from promotional marketing communications at any time
  • Promote Asana to you
  • Facilitate reporting and analysis on the performance of the Asana platform or features available in Asana
  • Provide webinars or public presentations
  • Demonstrate Asana or provide you with access to a demonstration Asana executable
  • Process your information in accordance with your instructions
  • Manage your account across devices. For example, we may look for or try to find the same unique users across multiple browsers or devices (such as smartphones or tablets), or we may work with service providers who do this to store your information across devices. Preferences and analyze the use of our products and services. If you would like to opt out of Google finding your location on devices in this way, you can install the Google Analytics opt-out browser add-on by clicking here

Support you and get feedback

  • Respond to your information requests
  • Help identify and troubleshoot any issues with your account and answer your questions
  • Resolve support requests
  • Provide you with reports on usage
  • Investigate your opinions through surveys, research trials and questionnaires

Comprehensive information

Unless otherwise prohibited by law, we may combine the information we collect through your use of our products and services with information obtained from other sources (including online and offline) and use the combined information as described above.

Aggregated and de-identified data

We may aggregate and/or de-identify information about your use of Asana (for example, the number of tasks or projects you create) so that such information can no longer be linked to you or your device. We may use such aggregated and de-identified information for any purpose, including, without limitation, research and marketing purposes, and may also disclose such information to any third party, including advertisers, promotional partners, sponsors, event promotions and/or others.

Artificial intelligence and machine learning

Some of Asana’s features are powered by artificial intelligence (AI) and machine learning. Administrators and super administrators can adjust your domain’s AI preferences at any time by accessing the Admin console.

When your domain enables features provided by Asana AI, we will use metadata related to your domain’s use of Asana to train machine learning models. Depending on the model and feature, these machine learning models support features in your domain and other Asana domains.

When your domain enables features from AI partners, we leverage third-party Large Language Model (LLM) service providers. Our third-party LLM service providers do not use customer data to train their models.

For more information about AI in Asana, review Asana Smart AI capabilities and management controls .

Asana may use artificial intelligence technology, including bots on our sites and products, to communicate with you, respond to your messages and questions, and provide information about our products and services. Visit the Asana Trust Center to learn more.

Legal basis for processing

For more information about the laws under which Asana processes your information, please go to  Other important information .

How we disclose your information

We need to disclose the information we collect about you to make our products and services work smoothly and to operate our business under the following conditions:

Your settings remain consistent across our products and services. Please note that information you submit through and publish in Asana may be viewable by other users of your workspace, team, department, or organization, depending on the specific settings you choose and if your network An organization has been established in the domain.

Service providers and secondary processors . We may provide permission or disclose your information to certain third parties who use the information on our behalf to assist in providing Asana’s services, websites and features. These third parties provide a variety of services to us, including, but not limited to, sales, marketing, providing content and functionality, features utilizing artificial intelligence, advertising, analytics, research, data storage, security, fraud prevention and other services. You can find a list of secondary processors here .

Advertising Partners . We may also provide information when you visit an Asana website (which may include an email address) to a service provider, who may “pair” this information in a de-identified form to a cookie (or mobile advertising identifier) ​​and Other unique IDs to provide you with more relevant Asana ads when you visit other websites. Our advertising partners may also use cookies and similar technologies on our site to display more relevant advertising about Asana on other sites you visit. Please see our Cookie Notice to learn more about how we use targeting cookies and your options for managing cookies.

Because you asked us to reveal it . We may disclose your information to third parties when you ask us to do so. This includes when you  connect Asana with other tools through our available integrations .