Monitored company
Asana
clause.watch tracks 2 legal documents published by Asana, re-reading each one every six hours. Below is what each document covers, in plain English.
Privacy
Asana Privacy Statement: User Overview
Updated: December 3, 2025
Effective: January 1, 2026
This summary highlights the practical implications of Asana’s Privacy Statement. It is not a substitute for the full statement or Asana’s separate Terms of Service, Subscriber Terms, Cookies Notice, and product-specific terms.
1. Data Collection and Use
Information collected
Asana may collect:
- Account details: name, email address, password (stored in hashed form), authentication-provider information, profile photo, and optional pronouns.
- Payment details: billing and financial information, generally collected through payment processors.
- Workspace content: tasks, projects, goals, portfolios, messages, attachments, forwarded emails, and other information entered or uploaded.
- AI-related activity: timestamps, the person triggering an AI feature, the feature used, and the related task, project, or other object.
- Communications and support data: support messages, chat transcripts, video/audio recordings and transcripts, feedback, research responses, and survey information.
- Employment and demographic information: optional job title, role, location, date of birth, social-media information, and—where voluntarily provided with consent—sentiment or biometric information for research.
- Usage and device data: IP address, browser and device details, cookies, clicks, pages viewed, scrolling, mouse activity, integration use, mobile identifiers, approximate location, and activity logs.
- Third-party information: information from integrations, marketing providers, other users, or business contacts.
Main uses
Asana uses this information to:
- Provide, maintain, secure, and improve its services and AI features.
- Personalize the product and recommend help content.
- Process payments and manage accounts.
- Analyze usage, conduct research, fix errors, and develop products.
- Prevent fraud and investigate alleged terms violations.
- Communicate service notices, support responses, and marketing.
- Advertise Asana, including targeted advertising based on product or website use.
- Comply with legal obligations and valid legal demands.
Asana may combine information from online and offline sources, unless prohibited by law. It may also create aggregated or de-identified information and use or disclose it broadly, including for research and marketing.
2. User Rights
Asana says it extends the following rights globally, subject to legal exceptions:
- Access or obtain a copy of personal information.
- Correct inaccurate or outdated information.
- Delete certain information.
- Restrict certain processing or disclosure.
- Export or transfer information to another provider.
- Withdraw consent where processing relies on consent.
- Opt out of promotional marketing and targeted online advertising.
- Appeal a denied privacy request.
Identity verification may be required. If you use Asana through an employer, school, or other organization, you may need to direct requests to that organization’s administrator. California residents have additional CCPA rights, including opting out of cross-context behavioral advertising. Oregon and Minnesota residents may request lists of certain specific recipients.
3. Third-Party Sharing
Asana may disclose information to:
- Service providers, subprocessors, contractors, and AI, analytics, advertising, storage, security, and support vendors.
- Channel partners and affiliates.
- Advertising providers that match email or online identifiers to cookies or advertising IDs.
- Third-party integrations you activate.
- Your organization’s Asana administrator.
- A buyer or successor in a merger, asset sale, bankruptcy, or similar transaction.
- Authorities where legally required.
Content posted in public forums is not confidential, may be publicly searchable, and may be reused for marketing or testimonials. Information within an organizational workspace may be visible to other authorized users depending on workspace settings. Third-party integrations are governed by those providers’ own privacy practices.
Asana states it does not disclose information to third parties for their own direct marketing purposes, although it does support targeted advertising for Asana.
4. AI and Machine-Learning Training
- When Asana AI features are enabled, Asana uses metadata about the domain’s use of Asana to train machine-learning models.
- Those models may power features in your organization and other Asana domains.
- When AI-partner features are enabled, third-party large-language-model providers may process data, but Asana says contracts prohibit those providers from using customer data to train their models.
- AI chatbot transcripts may be stored and used for staff training and quality assurance.
- Domain administrators and super administrators can adjust AI preferences.
The statement does not promise that all AI-related processing is disabled when AI is turned off; users should review the AI feature documentation and administrator controls.
5. Key User Responsibilities and Risks
- Users under 16 may not use Asana.
- Avoid posting confidential or sensitive information in public forums.
- Understand that organizational administrators may access, retain, export, restrict, or delete workspace content and usage logs.
- Review and limit integrations, cookies, advertising settings, and cross-device tracking.
- Use strong, unique passwords and protect account credentials.
- Information may be transferred to and stored in the United States and other countries.
- Asana retains information as long as needed for stated purposes or as required/permitted by law.
6. Liability and Disputes
The Privacy Statement says security measures are used but expressly states that no internet transmission or storage method is completely secure and provides no absolute security warranty.
It does not contain the main liability caps, arbitration provisions, governing-law terms, or general dispute procedures. Those are likely located in Asana’s User Terms, Subscriber Terms, or applicable agreement. For EU/UK/Swiss data-transfer complaints, unresolved complaints may be referred to BBB National Programs, with limited circumstances allowing binding arbitration under the Data Privacy Framework.
7. Changes
Asana may update the statement to reflect changed practices, technology, features, or legal requirements. It will provide notice and/or obtain consent when legally required, but the statement does not guarantee individualized notice for every change. Previous versions are listed, so users should periodically review updates.
Terms
Asana User Terms: Key Points and Risks
*This summary covers the User Terms effective January 1, 2024. The Terms incorporate Asana’s separate Privacy Statement and other product-specific documents, which may contain important additional rules.*
1. Data Collection and Use
The Terms themselves do not provide a complete description of personal data collected. Account registration requires accurate, complete, and current information, including a username, password, and likely associated account details. The separate Privacy Statement governs broader data practices, such as information collected through the Websites, usage data, cookies, communications, and security information.
User content
- Free Users retain ownership of content they submit, such as tasks, text, files, and other materials.
- By submitting Free User Content, you grant Asana a broad license to access, use, copy, reproduce, process, adapt, publish, transmit, and display it:
- to provide the Service;
- as permitted by the Privacy Statement; and
- where legally required or reasonably necessary to comply with legal process.
- Managed Users’ content is “Customer Data,” controlled by the organization or person who purchased the subscription, not by the individual user as against Asana. The Customer may manage permissions, integrations, sharing, modification, consolidation, or deletion of the data.
Practical risk: In an employer or other managed workspace, administrators and the Customer may be able to access, share, modify, or delete your work. Asana directs many data-related responsibilities and disputes to the Customer.
2. User Rights
These Terms do not expressly provide a detailed set of rights to access, correct, export, delete, or restrict personal data. Those rights may appear in the Privacy Statement or apply under local privacy laws, including laws in the EU and other jurisdictions.
- Free Users retain ownership of their User Content, but Asana receives the license described above.
- Managed Users generally do not control Customer Data. The Customer Agreement and administrator settings govern access and handling.
- You may stop using the Service, but termination may not immediately result in deletion of content or data.
- Feedback submitted to Asana may be used for any purpose without compensation.
3. Third-Party Sharing
The Terms permit or contemplate sharing in several ways:
- Customers and Account Administrators may disclose or expand access to Managed User data.
- Asana may use or disclose Free User Content as necessary to provide the Service, comply with law, or follow legal process.
- The Service may involve third-party vendors, integrations, linked websites, and services. Their own terms and privacy policies apply.
- Asana disclaims responsibility for third-party handling practices, products, content, or transactions.
- Asana may notify an Account Administrator about alleged acceptable-use violations.
The Terms do not list specific third parties or subprocessors; those may be identified in separate Asana documents.
4. AI/ML Training
The Terms address use of Asana AI and third-party AI models, but do not expressly state whether User Content is used to train AI models.
Users of Asana AI must:
- provide appropriate human oversight and safeguards;
- remain responsible for decisions, advice, and actions based on AI output;
- disclose intended use and compliance information upon request; and
- assess outputs for accuracy and suitability.
Users may not present AI-generated content as human-generated and may not use AI to circumvent safety controls.
Risk: AI outputs may be inaccurate, and the Terms place responsibility on the user. Consult Asana’s AI-specific and Privacy Statement materials for training, retention, and model-provider details.
5. Key Obligations and Restrictions
You must:
- be at least 16, or older where local law requires;
- provide accurate registration information;
- protect your password and account;
- promptly report unauthorized access;
- ensure you have rights to submit content; and
- comply with law and the Acceptable Use Policy.
Prohibited conduct includes hacking, scraping, probing systems, disruption, spam, fraud, impersonation, harassment, illegal activity, privacy violations, malicious content, unauthorized sensitive information, exploitation of minors, and developing competing services.
Asana may suspend or terminate access if it reasonably believes a violation occurred or is imminent. The license is limited, revocable, non-transferable, and for internal use only.
6. Liability and Disputes
- The Service is provided “as is” and “as available,” with broad warranty disclaimers.
- Asana generally excludes liability for indirect, consequential, punitive, incidental, data-loss, profit-loss, and substitute-service damages.
- Aggregate liability is capped at $100, to the fullest extent permitted by law.
- You must indemnify Asana for claims arising from your use, content, legal violations, or infringement of others’ rights.
- Before formal action, you generally must provide written notice and attempt good-faith negotiations, except for intellectual-property and small-claims matters.
- California law applies, subject to mandatory consumer protections in some jurisdictions.
7. Changes
Asana may revise the Terms by posting an updated version. For material changes, it says it will provide reasonable notice by email or through the Service/Websites. Otherwise, changes may take effect when posted. Continued use constitutes acceptance; if you disagree, you must stop using the Service. Asana may also modify or discontinue the Service with or without notice and without liability.
Change history
2026-10-21 · Terms
2026-10-21 · Terms
Summary
The diff only states that approximately 50 words were added, but does not provide the actual added language or identify where it appears in the document.
Analysis Limitations
- It is not possible to determine what contractual rights, obligations, or risks have changed.
- The available information does not show whether the addition affects:
- Customer data ownership or permitted use
- Confidentiality or privacy obligations
- Data retention or deletion
- Security requirements
- Intellectual property rights
- Liability, indemnification, or warranties
- Service termination or post-termination obligations
AI Training and Model Use
No language is provided addressing whether customer data may be:
- Used to train, fine-tune, or improve artificial intelligence or machine-learning models
- Combined with other customers’ data for model development
- Reviewed by personnel or contractors for model training or quality assurance
- Retained after termination for training or evaluation purposes
- Used to create derived data, embeddings, outputs, or other model-related products
- Excluded from training unless the customer opts in or opts out
Accordingly, no specific change or new risk concerning AI training can be identified from the supplied diff.
Required Information
To perform a meaningful legal analysis, provide the actual approximately 50 words that were added, together with enough surrounding text to show their context.
2026-10-21 · Terms
Structured Summary of Important Changes
1. Reorganization of Terms and Policy Navigation
- The navigation menu has been substantially reorganized.
- “User Terms of Service” appears to have been changed to a broader selector labeled “User Terms,” with options including:
- Subscriber Terms
- Public Entity Addendum
- Licensed Software Terms
- API Terms
- Developer Terms
- Developer Sandbox Terms
- Several policy and addendum links were rearranged or removed from the displayed navigation, including references to:
- Modern Slavery Statement
- Product-Specific Terms
- EU Data Act Addendum
- Privacy Statement
- Asana Data Processing Addendum
- Business Associate Addendum
- StackAI-related policies and addenda
Risk: The navigation changes may make it less clear which contractual terms apply to a particular customer or product. Customers should confirm that the correct service-specific terms, privacy documents, and data-processing addenda remain incorporated into their agreement.
2. Revised Description of the Service
The introduction has been rewritten. The revised language describes Asana as offering:
> “team productivity, collaboration, and organizational tools”
It also refers users to the “Asana Guide” and “Release Notes” for additional descriptions of the Service.
The prior language more generally described the Service and stated that the Terms governed use of the Service and Websites. The revised language expressly states that the Terms apply to the user as a user of the Service.
Risk: Incorporating the Asana Guide and Release Notes into the Service description could allow those materials to influence the scope or functionality of the contractual service. Customers should check whether those materials can be changed unilaterally and whether they contain terms affecting data handling, product functionality, or obligations.
3. Website Scope Clarification
The revised introduction expressly states that the Terms apply to:
- The Service; and
- Asana’s Websites, including www.asana.com, wavelength.com, blog.asana.com, and community.asana.com.
This is primarily a clarification, but it confirms that website use—not only use of the core product—is covered by the User Terms.
4. Dispute-Notice Contact
The diff shows a dispute-notice email address, dispute-notice@asana.com, and a separate contact address, legal@asana.com, near Section 13.
The displayed diff is malformed and does not clearly establish whether either address is newly added, removed, or merely relocated.
Risk: Customers should verify the final published version to confirm the correct address and required procedure for providing formal dispute notice.
5. AI Model Training and Customer Data
No express change in the provided diff states that customer data:
- May be used to train AI models;
- May not be used to train AI models;
- May be used to improve Asana or third-party AI systems; or
- Is subject to a customer opt-out or consent requirement.
Although StackAI-related policies and addenda appear in the navigation changes, the diff does not show substantive language governing AI training or use of customer data.
Conclusion: Based solely on this diff, there is no identifiable change to AI-model training rights or restrictions. The final Privacy Policy, StackAI terms, and applicable data-processing addenda should nevertheless be reviewed separately.
2026-10-19 · Terms
Summary of Important Changes
1. Terms navigation and document structure
- The page’s terms menu has been substantially reorganized.
- Several documents appear to have been added or reclassified, including:
- Subscriber Terms
- Public Entity Addendum
- Licensed Software Terms
- API Terms
- Developer Sandbox Terms
- EU Data Act Addendum
- StackAI-related privacy and data-processing documents
- The revised navigation removes or relocates some items, including the Modern Slavery Statement and certain product-specific references.
- Risk: The diff is heavily interleaved and appears to include website navigation or rendering content rather than clean legal text. It should be verified which linked terms actually apply to a particular customer or product.
2. Expanded and clarified definition of the Service
The introduction is rewritten to state that Asana provides:
> “team productivity, collaboration, and organizational tools, as further described in the Asana Guide and its Release Notes”
The Service is also expressly defined to include:
- Asana’s service;
- Asana websites, including named domains such as asana.com, wavelength.com, blog.asana.com, and community.asana.com; and
- The User Terms governing use of the Service and Websites.
Risk: Incorporating the Asana Guide and Release Notes into the Service description may allow those materials to affect the scope or functionality of the contractual service. Customers should check whether those materials can be changed unilaterally and whether they contain obligations or disclaimers.
3. Contract formation language retained
The revised text continues to state that the User Terms are:
> “a binding legal contract between you and Asana”
It also adds or restores language that the Terms apply to the user and govern use of the Service and Websites.
Risk: The broader reference to Websites may extend contractual restrictions, disclaimers, or dispute provisions beyond the core Asana product.
4. Dispute-contact provision
The dispute-notice email remains listed as:
> dispute-notice@asana.com
A later contact reference appears to show legal@asana.com.13.. This may be a formatting or redlining artifact, but it should be corrected or confirmed before publication.
AI Training and Customer Data
- No clear substantive change to AI-training rights or customer-data use appears in the supplied diff.
- The diff does not expressly add or remove language authorizing Asana or StackAI to:
- train AI or machine-learning models using customer data;
- retain prompts, outputs, or uploaded content for training;
- use customer data for product improvement; or
- share data with AI providers.
- The addition of StackAI privacy and data-processing documents to the navigation is notable, but the supplied text does not establish whether those documents apply to the customer or contain AI-training permissions.
Recommended review: Compare the full StackAI Privacy Policy, StackAI Platform Data Processing Addendum, Privacy Statement, and applicable Subscriber Terms for the operative AI-training and data-use provisions.
2026-10-18 · Terms
Summary
The provided diff does not include the actual added language. It only states:
> “Added approximately 50 words to the document”
Accordingly, it is not possible to determine what legal terms changed or whether the additions create new obligations or risks.
AI Training and Data Use
- No wording is provided addressing whether customer data may be:
- Used to train, fine-tune, or improve AI models;
- Shared with AI providers or subprocessors;
- Retained after services end;
- De-identified or aggregated before use; or
- Used for product development, analytics, or other secondary purposes.
- Therefore, no conclusion can be reached about whether the agreement now permits or restricts AI training using customer data.
Potential Risk Areas to Check in the Missing Text
The added language should be reviewed for:
1. Consent or authorization to use customer content, prompts, outputs, personal information, or confidential information for AI training.
2. Scope of permitted use, including whether use is limited to providing the services or extends to improving products generally.
3. Data ownership and license rights, especially broad, perpetual, irrevocable, worldwide, or sublicensable licenses.
4. Anonymization or aggregation requirements and whether they are mandatory or merely optional.
5. Opt-out rights for the customer and whether opting out requires a paid plan or special request.
6. Confidentiality and security protections applicable to data used in model development.
7. Retention and deletion provisions, including whether data remains in training datasets or model weights after deletion.
8. Responsibility for AI providers or subprocessors that may independently use the data.
Conclusion
No substantive legal or AI-related change can be analyzed from the supplied information. The full text of the approximately 50 added words, together with any surrounding provisions they modify, is required for a meaningful risk assessment.
2026-10-18 · Privacy
2026-10-17 · Privacy
2026-10-16 · Terms
Summary of Important Changes
1. Terms navigation and document structure
- The header/navigation has been substantially reorganized.
- Several standalone or linked documents appear to have been removed from the navigation, including:
- EU Data Act Addendum
- Privacy Policy
- Privacy Commitment
- Business Associate Addendum (HIPAA)
- Law Enforcement Guidelines
- Subprocessors
- StackAI Privacy Policy
- StackAI Platform Data Processing Addendum
- StackAI by Asana Bring Your Own Cloud
- Other documents remain listed, including the Data Processing Addendum, Cookies Notice, Security/Data Security Standards, and various product or developer terms.
Risk: Removal from navigation does not necessarily mean these documents are legally terminated or no longer applicable. However, it may make it less clear which terms govern a customer’s use of the service, particularly for privacy, HIPAA, StackAI, and EU Data Act matters. Customers should verify the currently incorporated documents and their effective versions.
2. Changes to the introduction and scope
The introduction is being rewritten from a general description of Asana’s “Service” to language stating that Asana offers:
> “team productivity, collaboration, and organizational tools”
The revised text also says that the tools are described in the Asana Guide and Release Notes, and defines the “Service” to include the websites.
The revised language expressly states that the User Terms are:
> “a binding legal contract between you and Asana and explain the rules governing your use of our Service and Websites.”
It also adds that the Terms apply to the user.
Risk: Incorporating the Asana Guide and Release Notes into the service description may allow those materials to influence the scope or functionality of the contractual service. The diff does not show whether those materials are binding, how changes are communicated, or whether they can modify contractual rights.
3. Dispute-notice contact information
The prior dispute procedure referenced dispute-notice@asana.com for written notice before formal action. That email address appears to be deleted, with no replacement shown.
A separate reference to legal@asana.com also appears to have been deleted or corrupted by the diff formatting.
Risk: The required method for providing dispute notices may be unclear or technically unusable. This could create uncertainty about compliance with pre-litigation notice requirements.
4. AI training and customer data
No express change concerning AI model training, use of customer data to train models, or restrictions on training was identified in this diff.
The diff does remove StackAI-related privacy and data-processing documents from the navigation, but it does not show whether those documents were substantively amended, withdrawn, or relocated.
Risk: Customers using StackAI or other AI features should review the current StackAI Privacy Policy, StackAI Platform Data Processing Addendum, and applicable product terms separately. The navigation changes alone are insufficient to determine whether customer data may be used for AI training.
2026-10-15 · Privacy
2026-10-14 · Privacy
2026-10-12 · Privacy
No
2026-10-11 · Terms
No
2026-10-11 · Privacy
2026-10-10 · Terms
Summary of Important Changes
1. Service description and scope
- The introduction is substantially reformatted and rewritten.
- Asana’s offerings are now described as:
> “team productivity, collaboration, and organizational tools”
rather than the longer wording referring to the Asana Guide, Release Notes, and a “variety of” tools.
- The definition of the “Service” continues to include the Asana websites, including Asana.com, Wavelength, the blog, and the community site.
- The revised language expressly states that the Terms govern use of:
> “our Service and Websites”
- The revised text also appears to retain references to the Asana Guide and Release Notes as descriptions of the Service.
Potential risk
The wording remains broad and may allow Asana to determine the scope of the Service through materials such as the Asana Guide and Release Notes. Depending on how those materials can be updated, this could give Asana flexibility to change or expand covered products without amending the core Terms. The excerpt does not show whether those documents are contractually binding or how much notice is required for changes.
2. Navigation and document-selection changes
The diff contains extensive apparent replacement of page-navigation text, including links to:
- Subscriber Terms
- Licensed Software Terms
- API Terms
- Developer and Developer Sandbox Terms
- Product-Specific Terms
- EU Data Act Addendum
- Privacy Statement and Privacy Commitment
- Data Processing Addendum
- Security materials
- StackAI materials
- StackAI Privacy Policy
- StackAI Platform Data Processing Addendum
These changes appear primarily to reorganize or correct website navigation rather than amend the operative legal provisions. However, the addition of numerous linked terms and addenda could make it important to confirm which documents apply to the customer’s specific use of Asana.
3. AI training and use of customer data
- No express change concerning the use of customer data to train AI models is visible in this diff.
- The diff does not add or remove language addressing:
- training, fine-tuning, or improving AI models;
- use of Customer Data, Content, or prompts for AI development;
- opt-out or consent rights;
- retention of data used for AI training; or
- restrictions on third-party AI providers.
- References to “StackAI” and related privacy or data-processing documents appear to be navigation additions or reorganizations. The substantive StackAI terms are not included in the excerpt, so their AI-data provisions cannot be assessed here.
4. Contact information
The diff appears to modify or remove an email address used for formal dispute notices, while retaining another legal contact address. Because the displayed diff is malformed, it is unclear whether this is a substantive deletion or a formatting/navigation artifact. This should be verified against the final published Terms.
2026-10-09 · Terms
Summary
The diff does not include the actual added language. It only states that approximately 43 words were added.
Key Changes
- No substantive legal changes can be identified without the text of the added provisions.
- It is therefore not possible to assess whether the amendment changes:
- Customer data ownership or licensing rights;
- Permitted uses of customer data;
- Data retention, deletion, or confidentiality obligations;
- Disclosure to affiliates or third parties;
- Security or compliance requirements;
- Liability, indemnification, or audit rights; or
- Governing law or dispute-resolution provisions.
AI Training and Data Use
- No conclusion can be reached regarding AI-model training.
- The provided diff does not reveal whether customer data may be:
- Used to train, fine-tune, or improve artificial-intelligence or machine-learning models;
- Combined with other customers’ data for training;
- Used in de-identified, aggregated, or identifiable form;
- Retained after termination for model-training purposes; or
- Excluded from training unless the customer opts in or opts out.
Risk Assessment
The added wording should be reviewed for terms such as “train,” “improve,” “develop,” “machine learning,” “artificial intelligence,” “models,” “aggregated data,” “de-identified data,” “service improvement,” and “usage data.” These provisions may materially expand the provider’s rights to use customer information, potentially creating confidentiality, privacy, regulatory, intellectual-property, and competitive risks.
The full 43-word addition is required for a reliable legal analysis.
2026-10-09 · Privacy
2026-10-08 · Privacy
2026-10-08 · Terms
Structured Summary of Important Changes
1. Document and navigation changes
- The document title and navigation appear to have been reorganized:
- “User Terms of ServiceLegalUser” was changed to “User Terms of ServiceSelect an optionUser.”
- Numerous linked policies and addenda were reordered or relabeled, including the Subscriber Terms, Licensed Software Terms, API Terms, Developer Terms, DMCA Policy, Privacy Statement, Data Processing Addendum, and StackAI materials.
- These changes appear partly editorial or website-navigation related rather than substantive legal amendments. However, the diff is heavily malformed, so it is difficult to determine whether the linked-document structure or incorporation by reference has changed.
- Risk: Customers should confirm which version of each linked policy is legally incorporated into the Terms and whether the links point to current or historical versions.
2. Revised description of the Service
The introduction was rewritten from a general description of Asana’s “productivity, collaboration, and organizational tools” to:
> “a variety of team productivity, collaboration, and organizational tools, as further described in the Asana Guide and its Release Notes”
The revised language then defines the Service as including the websites and states that the Terms govern use of “our Service and Websites.”
Potential implications:
- The phrase “a variety of” may broaden the range of products covered.
- Express references to the Asana Guide and Release Notes may allow those materials to help define or modify the scope and functionality of the Service.
- Customers should check whether the Guide or Release Notes can be updated unilaterally and whether such updates may alter contractual obligations, features, or permitted uses.
3. AI training and use of customer data
- No express provision addressing AI model training, machine learning, generative AI, or use of Customer Data to train models is visible in the supplied diff.
- The diff does not appear to add or remove language granting Asana a right to:
- train AI models using Customer Data;
- retain prompts, outputs, or usage data for model improvement;
- use de-identified or aggregated Customer Data for training; or
- allow third-party AI providers to use Customer Data for training.
- Because the diff references StackAI materials and a StackAI Privacy Policy, customers should separately review those documents for AI-related data-use permissions. The supplied text does not establish whether those materials were newly incorporated or merely rearranged.
4. Dispute-contact language
- The dispute-notice email address appears to have been changed or corrupted in the diff, and the concluding contact information appears as “legal@asana.com.13.”
- Risk: The correct notice address and any required pre-litigation dispute procedure should be verified. An incorrect address could create uncertainty about whether a customer properly provided contractual notice.
5. Drafting and implementation concern
The diff contains substantial duplicated, concatenated, and apparently misplaced text. Before acceptance, customers should obtain a clean redline or final PDF/HTML version and verify that no substantive provisions were accidentally omitted or altered.
2026-10-08 · Privacy
2026-10-07 · Privacy
2026-10-06 · Privacy
2026-10-06 · Privacy
2026-10-06 · Terms
Summary
The provided diff does not include the actual added, deleted, or replaced legal language. It only states:
> “Added approximately 43 words to the document”
Accordingly, it is not possible to determine:
- What contractual rights or obligations changed;
- Whether liability, indemnity, confidentiality, termination, or payment terms were modified;
- Whether customer data may be collected, disclosed, retained, or used for new purposes; or
- Whether customer data, prompts, outputs, or usage information may be used to train, fine-tune, evaluate, or improve AI models.
AI-Training Risk Assessment
No conclusion can be reached from the information provided. In particular, the diff does not reveal whether it:
- Permits use of customer content for model training;
- Allows use of data in de-identified, aggregated, or pseudonymized form;
- Applies an opt-out or requires affirmative consent;
- Extends training rights to affiliates, service providers, or subprocessors;
- Allows retention of data after termination; or
- Distinguishes between customer content, personal data, prompts, outputs, metadata, and telemetry.
Information Needed
Please provide the complete redline text, with additions, deletions, and replacements shown using the stated notation. The exact 43 added words are necessary to identify any new legal risks.
2026-10-05 · Privacy
2026-10-05 · Terms
Summary of Important Changes
1. Reorganization and apparent document-selection changes
- The opening navigation has been substantially rewritten, replacing or rearranging links to:
- User Terms of Service
- Subscriber Terms
- Public Entity Addendum
- Licensed Software Terms
- API Terms
- Developer and Developer Sandbox Terms
- DMCA Policy, Privacy materials, security materials, and other addenda.
- The revised text appears to add or emphasize a “Select an option” menu and multiple linked terms. This may affect which contractual terms apply to a user, but the diff is heavily contaminated with website-navigation text, making the intended legal changes difficult to determine.
- Customers should confirm that the correct agreement and any applicable addenda are clearly identified and incorporated.
2. Revised introduction and scope of the Service
The introduction has been rewritten from a direct description of the contractual terms to language stating that Asana:
- Offers “a variety of team productivity, collaboration, and organizational tools”;
- Describes those tools in the Asana Guide and Release Notes; and
- Provides websites including Asana-related domains.
The revised language then states that the Terms are a binding contract governing use of the Service and Websites.
Risk
- Incorporating the Asana Guide and Release Notes into the description of the Service may expand the scope of covered products or features without amending the core Terms.
- If those materials can be changed unilaterally, customers may face uncertainty about what services, functionality, or obligations are contractually included.
- The revised wording could also make additional websites or products subject to the Terms.
3. Possible dispute-notice contact change
- The diff appears to delete the address dispute-notice@asana.com from the pre-litigation dispute-notice requirement.
- The surrounding provision is incomplete, so it is unclear whether the requirement itself was removed, moved, or merely had its email address changed.
Risk
- If the notice requirement remains but the designated address is removed or changed ambiguously, customers may be uncertain how to provide legally required dispute notices.
- The final text should be checked for a valid notice address and clear procedural requirements.
4. Contact-information formatting issue
- The ending contains a malformed-looking change involving legal@asana.com.13.
- This may be a diff or formatting artifact, but if present in the published Terms it could make the contact provision inaccurate or unusable.
5. AI-model training and use of customer data
- No express change addressing AI-model training, model improvement, machine learning, or use of customer content for AI purposes is visible in the supplied diff.
- The revised references to the Service, Release Notes, Privacy Statement, and related documents could indirectly affect data-use terms if those linked materials contain AI provisions, but the diff does not show those provisions.
- A separate review of the Privacy Statement, Data Processing Addendum, product-specific terms, and any AI-specific terms is necessary to determine whether customer data may be used to train or improve AI models.
Overall assessment
The clearest substantive change is the broader and more flexible description of the Service through external guides and release notes. The diff does not provide enough reliable text to identify a new customer-data or AI-training authorization.
2026-10-03 · Terms
Summary
The provided diff states only:
> “Added approximately 43 words to the document”
It does not include the actual added language, nor identify where in the document the words were inserted.
Legal and Commercial Impact
- Unable to determine substantive changes: Without the new wording, it is not possible to assess changes to rights, obligations, liability, confidentiality, data processing, intellectual property, termination, or other legal terms.
- No AI-training analysis possible: The diff does not reveal whether customer data may now be:
- Used to train, fine-tune, or improve AI models;
- Combined with other customers’ data;
- Reviewed by human personnel for model-development purposes;
- Retained after termination;
- De-identified, anonymized, or otherwise protected;
- Used by service providers or subprocessors; or
- Excluded from training unless the customer opts in or opts out.
- Potential significance of a short addition: Even approximately 43 words could materially expand the provider’s rights if they amend data-use permissions, license customer content, waive confidentiality restrictions, or create an exception for product improvement or AI training.
Risk Assessment
Current assessment: Indeterminate. The available diff is insufficient to identify new risks or determine whether the customer’s data can be used to train AI models.
Information Needed
Please provide the actual 43-word addition and, preferably, the surrounding clause or full redline. The most important language to review will include terms such as:
- “train,” “develop,” “improve,” or “fine-tune” models;
- “customer data,” “customer content,” or “inputs”;
- “service improvement” or “product improvement”;
- “aggregated,” “de-identified,” or “anonymized” data;
- “license,” “sublicense,” or “perpetual” rights;
- “retain,” “store,” or “delete”; and
- “opt out,” “opt in,” or similar customer controls.
2026-10-03 · Privacy
2026-10-02 · Terms
Summary of Important Changes
1. Scope and Description of the Service
- The opening description has been reorganized and rewritten.
- Asana’s offerings are now described as a variety of “team productivity, collaboration, and organizational tools,” rather than primarily as tools described in the Asana Guide and Release Notes.
- The definition of the “Service” still includes the Asana websites, including asana.com, wavelength.com, blog.asana.com, and community.asana.com.
- The language now states more directly that the Terms are a binding legal contract between the user and Asana and govern use of the Service and Websites.
Potential risk
The revised wording may broaden or clarify the scope of products, features, websites, and materials covered by the Terms. Incorporating the Asana Guide and Release Notes into the service description may also allow those materials to influence the scope or functionality of the contractual service, depending on how they are incorporated elsewhere.
2. Website and Legal-Document Navigation Changes
The diff contains extensive apparent changes to navigation menus and links, including references to:
- Subscriber Terms
- Public Entity Addendum
- Licensed Software Terms
- API Terms
- Developer and Developer Sandbox Terms
- EU Data Act Addendum
- Privacy Statement and Privacy Commitment
- Data Processing Addenda
- Security and Subprocessor materials
- StackAI Privacy Policy
These appear largely to be website-navigation or formatting changes rather than substantive contractual provisions.
Potential risk
Because the diff appears to combine page content with navigation text, it is difficult to determine whether all linked documents are incorporated into the Terms or merely displayed as available legal resources. The final document should clearly identify which policies and addenda are legally incorporated and which are informational only.
3. AI Training and Use of Customer Data
- No substantive provision in the supplied diff expressly changes whether customer data, content, prompts, outputs, or usage information may be used to train AI models.
- References to “StackAI” and a “StackAI Privacy Policy” appear in the navigation material, but the diff does not provide operative language addressing AI training, model improvement, retention, or use of customer content.
- Accordingly, this diff does not establish a new permission to train AI models on customer data, nor does it remove an existing restriction.
Recommended review
The complete Privacy Statement, StackAI terms, product-specific terms, and any AI/data-processing addendum should be reviewed separately for provisions addressing:
- Training or fine-tuning models using customer content
- Use of prompts, outputs, telemetry, or metadata
- Opt-out rights
- Human review or vendor access
- Retention and deletion
- Whether enterprise data is segregated from general model training
4. Contact Information
- The dispute-contact email appears to remain
dispute-notice@asana.com. - A later contact reference appears corrected or reformatted as
legal@asana.com, followed by a stray “.13.” marker.
Potential risk
The stray formatting may create ambiguity or a drafting defect. The final Terms should be checked to ensure all contact addresses are complete and functional.
2026-10-02 · Privacy
2026-10-01 · Privacy