Asana is a work management platform that provides teams with the tools to orchestrate their work and can now do more than ever as the operating system for human-agent teams, delivering real enterprise productivity. 

At Asana, our mission is your mission. We’re committed to protecting your privacy rights, so you can focus on the work that matters most to your business — with peace of mind.

This Privacy Statement describes how Asana processes your information and explains the choices available to you with respect to your information. To learn more about Asana's commitment to your privacy, please read our Privacy Commitment.

If you have any questions or concerns about how Asana processes your information or about this Privacy Statement, you can email us any time at privacy@asana.com. Additionally, if you’re looking to exercise your privacy rights, you can do so here.

What’s Changing With This Update

We updated our Privacy Statement to include information about our business and data processing practices as our product evolves and we further integrate AI into our core service offering.

It's important to us that you're able to clearly understand how we process your information and what rights you have under privacy and data protection laws. We welcome any questions, concerns, or feedback you may have about the updates to this Privacy Statement.

You can view the previous versions of this Privacy Statement in the section titled Previous Privacy Statements.

Our Relationship With You

In situations where our users are subject to our Subscriber Terms, Enterprise Master Services Agreement, other Master Services Agreement to use Asana’s services and/or our Data Processing Addendum (DPA), Asana is the processor/service provider (a provider that processes personal data on behalf of or at the direction of a controller, or other similar designation under the law) and our customer (usually a company/organization) is the controller/business (the entity that decides how and why information is processed) of the information provided to Asana via use of Asana. In all other cases, Asana is the controller of the information.

For example, if you create an account with

• your organization email address, your organization is the controller of your Asana domain and the information stored in it.

• a free email domain (like gmail.com) or personal email account, Asana is the controller.

Asana can be used by companies or by individual users:

If you’re using Asana through your organization, for example an educational institution or with your company email address, your organization’s own Asana administrator is responsible for the accounts associated with that organization. The Asana administrator can: restrict, suspend, or terminate your access to or ability to use the services, access information about you, access or retain information stored with us (including your workspace content and log data about your use of Asana), and restrict your ability to edit, restrict, modify, or delete information associated with your use of our products and services. Asana also offers services that let our customers work with people outside their own organization. If a company or organization you work with uses Asana to collaborate with you, that organization is the controller of, and responsible for, the management of your data.

Information We Process

Asana processes information we receive directly from you, automatically collected when you use Asana or visit one of our websites, and collected by Asana from third parties. However, please note that this Privacy Statement does not apply to the processing of your information by third parties through your voluntary use of any third-party integrations available via our services. Please visit those third-party websites directly for more information on their privacy and data protection practices.

Information Asana Receives Directly From You

Information needed to create an account

This includes information that is needed for Asana to create an account for you and manage your ability to log in and out of Asana:

• Identifiers, including first and last name and email address

• Your password for Asana (which we store in hashed form) - unique, long, and strong, please

• Information related to a third-party authentication identity provider, (e.g., Google Authenticator

If you upgrade your account to a paid account, Asana may collect:

• Billing information, including name, address, and telephone number

• Financial information, including credit card information or bank account information collected by our payment processors on our behalf

• Information about your chosen Asana plan

Information you provide to us through your use of Asana

• Information you draft or submit to Asana in goals, portfolios, projects, messages, tasks, and other features of Asana, such as Asana AI

• Information uploaded to Asana, such as attachments

• Information triggered from use of an AI feature such as timestamp, who triggered the feature, what feature was used and what "object" (e.g., project, task, etc) it was triggered from 

• Information from emails you forward to x@mail.asana.com

• Profile photo and other information you provide to describe yourself, which we only collect if you do choose to provide it, such as your gender pronouns

• Video and audio recordings, and transcripts of those recordings, if you use video messaging,reach out to customer support, or expressly enable our desktop call recording feature  

• Professional or employment information, which may include your title or role at your organization if you elect to provide this information

• Feedback about our product and services, including information about the effectiveness of the feature and any other relevant information

• Any other information you choose to provide while using Asana that identifies or can be reasonably associated with you

Other information you may provide to us when you interact with Asana in other ways

If you directly interact with Asana staff, such as our sales, user research, or user operations groups, or if you become an