Asana Privacy Statement

This document is Asana's privacy commitment page, governing how Asana collects, uses, stores, and shares personal data for users of its work management platform, with stated legal bases including contractual necessity, legitimate interests, and consent depending on jurisdiction. The policy states that Asana acts as a data processor for customer workspace data and as a data controller for data collected through its marketing and website activities, and the terms authorize collection of account information, usage data, device and log data, and communications content. Notably, the document functions primarily as a high-level privacy hub page rather than a full standalone privacy policy; it references additional documents including a separate Privacy Policy, a Data Processing Agreement, and region-specific supplements, meaning the full scope of data rights and obligations cannot be assessed from this page alone. The document references compliance with GDPR for EU/EEA users, CCPA for California residents, and references certifications such as ISO 27001 and SOC 2 Type II, engaging the FTC Act for US users and data protection authorities in applicable jurisdictions; the enforceability and completeness of protections depends on the substance of the linked underlying documents, which are not fully reproduced here.