Monitored company
Asana
clause.watch tracks 2 legal documents published by Asana, re-reading each one every six hours. Below is what each document covers, in plain English.
Privacy
Asana Privacy Statement: User Overview
Updated: December 3, 2025
Effective: January 1, 2026
This summary highlights the practical implications of Asana’s Privacy Statement. It is not a substitute for the full statement or Asana’s separate Terms of Service, Subscriber Terms, Cookies Notice, and product-specific terms.
1. Data Collection and Use
Information collected
Asana may collect:
- Account details: name, email address, password (stored in hashed form), authentication-provider information, profile photo, and optional pronouns.
- Payment details: billing and financial information, generally collected through payment processors.
- Workspace content: tasks, projects, goals, portfolios, messages, attachments, forwarded emails, and other information entered or uploaded.
- AI-related activity: timestamps, the person triggering an AI feature, the feature used, and the related task, project, or other object.
- Communications and support data: support messages, chat transcripts, video/audio recordings and transcripts, feedback, research responses, and survey information.
- Employment and demographic information: optional job title, role, location, date of birth, social-media information, and—where voluntarily provided with consent—sentiment or biometric information for research.
- Usage and device data: IP address, browser and device details, cookies, clicks, pages viewed, scrolling, mouse activity, integration use, mobile identifiers, approximate location, and activity logs.
- Third-party information: information from integrations, marketing providers, other users, or business contacts.
Main uses
Asana uses this information to:
- Provide, maintain, secure, and improve its services and AI features.
- Personalize the product and recommend help content.
- Process payments and manage accounts.
- Analyze usage, conduct research, fix errors, and develop products.
- Prevent fraud and investigate alleged terms violations.
- Communicate service notices, support responses, and marketing.
- Advertise Asana, including targeted advertising based on product or website use.
- Comply with legal obligations and valid legal demands.
Asana may combine information from online and offline sources, unless prohibited by law. It may also create aggregated or de-identified information and use or disclose it broadly, including for research and marketing.
2. User Rights
Asana says it extends the following rights globally, subject to legal exceptions:
- Access or obtain a copy of personal information.
- Correct inaccurate or outdated information.
- Delete certain information.
- Restrict certain processing or disclosure.
- Export or transfer information to another provider.
- Withdraw consent where processing relies on consent.
- Opt out of promotional marketing and targeted online advertising.
- Appeal a denied privacy request.
Identity verification may be required. If you use Asana through an employer, school, or other organization, you may need to direct requests to that organization’s administrator. California residents have additional CCPA rights, including opting out of cross-context behavioral advertising. Oregon and Minnesota residents may request lists of certain specific recipients.
3. Third-Party Sharing
Asana may disclose information to:
- Service providers, subprocessors, contractors, and AI, analytics, advertising, storage, security, and support vendors.
- Channel partners and affiliates.
- Advertising providers that match email or online identifiers to cookies or advertising IDs.
- Third-party integrations you activate.
- Your organization’s Asana administrator.
- A buyer or successor in a merger, asset sale, bankruptcy, or similar transaction.
- Authorities where legally required.
Content posted in public forums is not confidential, may be publicly searchable, and may be reused for marketing or testimonials. Information within an organizational workspace may be visible to other authorized users depending on workspace settings. Third-party integrations are governed by those providers’ own privacy practices.
Asana states it does not disclose information to third parties for their own direct marketing purposes, although it does support targeted advertising for Asana.
4. AI and Machine-Learning Training
- When Asana AI features are enabled, Asana uses metadata about the domain’s use of Asana to train machine-learning models.
- Those models may power features in your organization and other Asana domains.
- When AI-partner features are enabled, third-party large-language-model providers may process data, but Asana says contracts prohibit those providers from using customer data to train their models.
- AI chatbot transcripts may be stored and used for staff training and quality assurance.
- Domain administrators and super administrators can adjust AI preferences.
The statement does not promise that all AI-related processing is disabled when AI is turned off; users should review the AI feature documentation and administrator controls.
5. Key User Responsibilities and Risks
- Users under 16 may not use Asana.
- Avoid posting confidential or sensitive information in public forums.
- Understand that organizational administrators may access, retain, export, restrict, or delete workspace content and usage logs.
- Review and limit integrations, cookies, advertising settings, and cross-device tracking.
- Use strong, unique passwords and protect account credentials.
- Information may be transferred to and stored in the United States and other countries.
- Asana retains information as long as needed for stated purposes or as required/permitted by law.
6. Liability and Disputes
The Privacy Statement says security measures are used but expressly states that no internet transmission or storage method is completely secure and provides no absolute security warranty.
It does not contain the main liability caps, arbitration provisions, governing-law terms, or general dispute procedures. Those are likely located in Asana’s User Terms, Subscriber Terms, or applicable agreement. For EU/UK/Swiss data-transfer complaints, unresolved complaints may be referred to BBB National Programs, with limited circumstances allowing binding arbitration under the Data Privacy Framework.
7. Changes
Asana may update the statement to reflect changed practices, technology, features, or legal requirements. It will provide notice and/or obtain consent when legally required, but the statement does not guarantee individualized notice for every change. Previous versions are listed, so users should periodically review updates.
Terms
Asana User Terms: Key Points and Risks
*This summary covers the User Terms effective January 1, 2024. The Terms incorporate Asana’s separate Privacy Statement and other product-specific documents, which may contain important additional rules.*
1. Data Collection and Use
The Terms themselves do not provide a complete description of personal data collected. Account registration requires accurate, complete, and current information, including a username, password, and likely associated account details. The separate Privacy Statement governs broader data practices, such as information collected through the Websites, usage data, cookies, communications, and security information.
User content
- Free Users retain ownership of content they submit, such as tasks, text, files, and other materials.
- By submitting Free User Content, you grant Asana a broad license to access, use, copy, reproduce, process, adapt, publish, transmit, and display it:
- to provide the Service;
- as permitted by the Privacy Statement; and
- where legally required or reasonably necessary to comply with legal process.
- Managed Users’ content is “Customer Data,” controlled by the organization or person who purchased the subscription, not by the individual user as against Asana. The Customer may manage permissions, integrations, sharing, modification, consolidation, or deletion of the data.
Practical risk: In an employer or other managed workspace, administrators and the Customer may be able to access, share, modify, or delete your work. Asana directs many data-related responsibilities and disputes to the Customer.
2. User Rights
These Terms do not expressly provide a detailed set of rights to access, correct, export, delete, or restrict personal data. Those rights may appear in the Privacy Statement or apply under local privacy laws, including laws in the EU and other jurisdictions.
- Free Users retain ownership of their User Content, but Asana receives the license described above.
- Managed Users generally do not control Customer Data. The Customer Agreement and administrator settings govern access and handling.
- You may stop using the Service, but termination may not immediately result in deletion of content or data.
- Feedback submitted to Asana may be used for any purpose without compensation.
3. Third-Party Sharing
The Terms permit or contemplate sharing in several ways:
- Customers and Account Administrators may disclose or expand access to Managed User data.
- Asana may use or disclose Free User Content as necessary to provide the Service, comply with law, or follow legal process.
- The Service may involve third-party vendors, integrations, linked websites, and services. Their own terms and privacy policies apply.
- Asana disclaims responsibility for third-party handling practices, products, content, or transactions.
- Asana may notify an Account Administrator about alleged acceptable-use violations.
The Terms do not list specific third parties or subprocessors; those may be identified in separate Asana documents.
4. AI/ML Training
The Terms address use of Asana AI and third-party AI models, but do not expressly state whether User Content is used to train AI models.
Users of Asana AI must:
- provide appropriate human oversight and safeguards;
- remain responsible for decisions, advice, and actions based on AI output;
- disclose intended use and compliance information upon request; and
- assess outputs for accuracy and suitability.
Users may not present AI-generated content as human-generated and may not use AI to circumvent safety controls.
Risk: AI outputs may be inaccurate, and the Terms place responsibility on the user. Consult Asana’s AI-specific and Privacy Statement materials for training, retention, and model-provider details.
5. Key Obligations and Restrictions
You must:
- be at least 16, or older where local law requires;
- provide accurate registration information;
- protect your password and account;
- promptly report unauthorized access;
- ensure you have rights to submit content; and
- comply with law and the Acceptable Use Policy.
Prohibited conduct includes hacking, scraping, probing systems, disruption, spam, fraud, impersonation, harassment, illegal activity, privacy violations, malicious content, unauthorized sensitive information, exploitation of minors, and developing competing services.
Asana may suspend or terminate access if it reasonably believes a violation occurred or is imminent. The license is limited, revocable, non-transferable, and for internal use only.
6. Liability and Disputes
- The Service is provided “as is” and “as available,” with broad warranty disclaimers.
- Asana generally excludes liability for indirect, consequential, punitive, incidental, data-loss, profit-loss, and substitute-service damages.
- Aggregate liability is capped at $100, to the fullest extent permitted by law.
- You must indemnify Asana for claims arising from your use, content, legal violations, or infringement of others’ rights.
- Before formal action, you generally must provide written notice and attempt good-faith negotiations, except for intellectual-property and small-claims matters.
- California law applies, subject to mandatory consumer protections in some jurisdictions.
7. Changes
Asana may revise the Terms by posting an updated version. For material changes, it says it will provide reasonable notice by email or through the Service/Websites. Otherwise, changes may take effect when posted. Continued use constitutes acceptance; if you disagree, you must stop using the Service. Asana may also modify or discontinue the Service with or without notice and without liability.
Change history
2026-09-05 · Terms
2026-09-04 · Terms
Summary
The provided diff does not include the actual contractual language added or changed. It only states:
> “Added approximately 45 words to the document”
Because the text of those 45 words is not provided, the legal and commercial impact cannot be determined.
AI Training and Data-Use Changes
No specific language is available to assess whether the contract now:
- Allows the provider to use customer data to train, fine-tune, or improve AI models;
- Permits use of customer prompts, inputs, outputs, account information, or usage data for training;
- Uses customer data for generalized model development or only for providing the contracted services;
- Requires customer consent or provides an opt-out mechanism;
- Anonymizes, aggregates, or de-identifies data before using it for training;
- Allows human review or sharing with affiliates, vendors, or other third parties;
- Grants the provider rights to retain data after termination; or
- Addresses ownership, confidentiality, security, or deletion of training data and model outputs.
Risk Assessment
The principal risk is that the missing language could materially expand the provider’s rights to use customer data, potentially including confidential, personal, regulated, or proprietary information. Without the actual wording, it is not possible to determine whether such rights are limited, optional, revocable, or subject to safeguards.
Required Information
Please provide the actual 45-word addition, including any surrounding sentence or section heading. The precise wording is necessary to identify:
1. What categories of data may be used;
2. Whether AI training or model improvement is expressly authorized;
3. Whether use is opt-in, opt-out, or automatic;
4. Whether data is anonymized or retained;
5. Whether third parties may access the data; and
6. Any resulting confidentiality, privacy, intellectual-property, or regulatory risks.
2026-09-03 · Terms
Summary of Important Changes
1. Scope and description of the Service
The introduction has been substantially reorganized and rewritten.
- The Service is now described as including “team productivity, collaboration, and organizational tools,” rather than the former broader wording referring to tools “as further described in the Asana Guide and its Release Notes.”
- The reference to the Asana Guide and Release Notes remains, but is repositioned as material describing the tools rather than as part of the definition of the Service.
- The definition expressly continues to include Asana’s websites, such as asana.com, wavelength.com, blog.asana.com, and community.asana.com.
- The terms now state more directly that they are a binding contract between the user and Asana and govern use of the Service and Websites.
- The language is being expanded incrementally to state that the Terms apply “to you as a user …” The provided diff appears incomplete, so the full effect of this sentence cannot be determined.
Risk/impact: The revised wording may make the Service definition more flexible because product scope can continue to be described through the Asana Guide and Release Notes. Users should check whether those materials can be updated unilaterally and whether they are contractually binding.
2. AI training and use of customer data
No express change concerning AI, machine learning, model training, or use of customer data to train AI models appears in the supplied diff.
The changes shown concern navigation, document headings, introductory descriptions, and formatting. They do not add or remove language authorizing Asana to:
- use Customer Content to train AI models;
- use data to improve algorithms or products;
- retain prompts, outputs, or user content for model development; or
- opt users in or out of AI training.
Any AI-related rights would therefore need to be reviewed in the unchanged portions of the User Terms, Privacy Statement, Subscriber Terms, Data Processing Addendum, or applicable AI/product-specific terms.
3. Dispute-contact language
The diff shows a reference to dispute-notice@asana.com in the dispute-resolution process, but the surrounding text is incomplete. A later contact reference appears corrupted or affected by formatting/numbering artifacts (including “legal@asana.com.13.” and “.13.”).
Risk/impact: Confirm the final published version to ensure the required dispute-notice email address and legal-contact information are accurate. An incorrect notice address could create uncertainty about compliance with pre-litigation notice requirements.
4. Document integrity
Much of the diff appears to contain website navigation text, duplicated headings, and markup artifacts rather than substantive contractual language. The final rendered document should be reviewed before relying on this diff as a complete amendment.
2026-09-02 · Privacy
Key Changes and Risks
1. AI integration and model training
- The Privacy Statement now expressly says Asana’s practices are evolving as it “further integrate[s] AI into [its] core service offering.” This signals broader and potentially increasing AI-related processing.
- The revised language states that some Asana services are powered by AI and machine learning, and that administrators or Super Admins can adjust AI preferences for their domain.
- The diff refers to information about AI features and administrative controls, and includes language concerning whether Asana may “train their models.” However, the excerpt does not clearly state:
- whether customer or user data is used to train Asana’s models;
- whether training is for Asana’s own models, third-party models, or both;
- whether customer data is used by default or only with consent/administrator activation;
- whether data is de-identified, aggregated, or deleted after training; or
- whether customers can contractually prohibit training.
Risk: The changes appear to expand or clarify Asana’s AI processing without providing a clear, affirmative limitation on model training. Customers should review the linked AI features/admin-controls documentation and the DPA or Enterprise agreement for binding restrictions. Privacy settings controlled by administrators may not provide a contractual prohibition against processing.
2. Expanded data sources and processing context
- Asana now expressly describes collaboration with people outside a customer’s organization. The organization using Asana is characterized as the controller/responsible party for management of the collaborating person’s data.
- The statement continues to cover information received directly, collected automatically, and obtained from third parties, including third-party integrations.
- New categories include:
- audio recordings or transcripts of chats, including chats involving third-party chatbots;
- information about how users use Asana’s features; and
- optional third-party targeting cookies.
Risk: Customer and collaborator data may enter Asana through external organizations, integrations, chatbots, and AI-enabled features. Responsibility may be allocated to the customer organization, potentially increasing its notice, consent, and data-governance obligations.
3. Cookies, advertising, and “sale/sharing”
- The revised notice expressly states that optional third-party targeting cookies are deployed.
- It provides more detailed CCPA language defining “sale” and “sharing” to include cookies that allow third parties to receive information for cross-context behavioral advertising.
- Global Privacy Control is recognized as an opt-out signal for applicable sales/sharing and targeting-cookie activities.
Risk: More data may be disclosed to advertising or analytics partners, subject to opt-out mechanisms rather than prior consent.
4. California and Nevada disclosures
- The California section is reorganized and more specifically addresses sensitive personal information, minors, sales/sharing, and financial incentives.
- The Nevada section now states that Asana does not currently sell personal information to third parties for their own direct-marketing purposes, while preserving an opt-out process for potential future sales/sharing.
Recommended actions
- Obtain the complete AI terms, DPA, and admin-control documentation.
- Confirm whether customer content is used for training and whether an opt-out is contractually available.
- Review administrator AI settings, third-party integrations, chatbot use, and targeting-cookie controls.
- Update internal notices and data-processing records for collaborator and AI-related processing.
2026-08-30 · Terms
Structured Summary of Important Changes
1. Scope and description of the Service
- The introduction is substantially rewritten.
- The prior wording described Asana as offering a “Service” and incorporated the Asana Guide and Release Notes into that description.
- The revised wording describes Asana as offering “a variety of team productivity, collaboration, and organizational tools,” with those tools described in the Asana Guide and Release Notes.
- The revised text then defines the “Service” to include those tools and separately includes Asana’s websites.
Potential risk: The broader wording may allow Asana to treat additional tools, features, or services as covered by the Terms. Continued reliance on the Asana Guide and Release Notes may also allow the practical scope or functionality of the Service to change through external documentation rather than through a formal amendment to the Terms. The diff does not show whether those documents are contractually incorporated elsewhere or how conflicts are resolved.
2. Expanded contractual application language
- The revised introduction adds a staged formulation stating that the Terms apply “to you as a user” (the excerpt appears incomplete).
- The prior language referred generally to the Terms being a binding contract governing use of the Service. The new language appears to emphasize that the Terms apply directly to each user, potentially including individual users under an organizational account.
Potential risk: This could make individual users more clearly subject to the Terms, although the excerpt is incomplete and does not establish whether users assume payment, indemnity, arbitration, or other account-level obligations.
3. AI model training and use of customer data
- No express change concerning AI, artificial-intelligence training, machine learning, model development, or use of customer data to train models appears in the provided diff.
- The changes to the description of Asana’s tools and incorporation of the Asana Guide/Release Notes could indirectly broaden the materials governing new AI-enabled features, but the diff does not grant or remove a specific right to use customer data for AI training.
- Any AI-training permissions would need to be located in other provisions, such as the privacy statement, data processing addendum, product-specific terms, or an AI-specific policy.
4. Dispute-contact and formatting issues
- The prior dispute notice email address,
dispute-notice@asana.com, appears within deletion markup, suggesting it may have been removed or changed; no replacement is visible in the excerpt. - The ending contains apparent redline or formatting corruption, including “legal@asana.com.13.” This should be verified against the clean version before relying on the amendment.
5. Navigation and document-list changes
- The opening includes extensive additions and deletions involving links to other terms and policies. These appear primarily to be website navigation or interface content, not substantive contractual amendments.
- Nevertheless, the newly listed documents—including StackAI materials and the StackAI Platform Data Processing Addendum—should be reviewed to determine whether they govern any relevant products or data processing.
2026-08-29 · Terms
Summary
The diff does not include the actual amended language. It only states: “Added approximately 45 words to the document.” Therefore, the legal effect of the changes cannot be determined.
AI Training and Customer Data
The provided diff does not identify whether the new language:
- Permits the provider to use customer data to train, fine-tune, or improve AI models;
- Allows use of prompts, inputs, outputs, metadata, or usage information for model development;
- Applies to personal data, confidential information, or customer content;
- Requires customer consent or provides an opt-out;
- Allows data to be shared with affiliates, vendors, or third-party AI providers;
- Provides safeguards such as de-identification, aggregation, retention limits, or deletion rights; or
- Grants the provider ownership or a broad license over customer data or AI-generated outputs.
Risk Assessment
No specific new legal risks can be assessed without the wording of the approximately 45 added words. In particular, the existence, scope, and limits of any AI-training authorization remain unknown.
The actual additions, deletions, and replacement text are needed for a reliable comparison.
2026-08-28 · Terms
Summary
The diff states only that approximately 45 words were added, but it does not provide the actual added language.
Key Legal Changes
- Cannot be determined: The subject matter, obligations, rights, limitations, and other legal effects of the added text cannot be analyzed without the wording of those 45 words.
- No deletion or replacement identified: The diff does not show any deleted or replaced language.
AI Training and Customer Data
- No conclusion possible: The supplied diff does not reveal whether the added language:
- Permits or restricts using customer data to train, fine-tune, or improve AI models;
- Allows use of customer prompts, inputs, outputs, personal information, or confidential information;
- Applies data-use rights to identifiable, aggregated, de-identified, or anonymized data;
- Allows sharing with affiliates, vendors, or third-party AI providers;
- Provides an opt-out, consent requirement, retention limit, or deletion obligation; or
- Grants the provider ownership or a broad license over customer data or AI-generated outputs.
Risk Assessment
The new language should be reviewed for provisions that could:
1. Expand the provider’s rights to use customer data beyond delivering the services;
2. Permit model training by default or without customer consent;
3. Allow retention or reuse of sensitive or confidential information;
4. Reduce the provider’s confidentiality, security, or deletion obligations; or
5. Create uncertainty about ownership and permitted use of outputs or derived data.
Please provide the actual 45-word addition, including any surrounding clause or section heading, for a meaningful legal analysis.
2026-08-27 · Terms
Summary of Important Changes
1. Reorganization and navigation changes
The document header and navigation have been substantially reformatted. References to various Asana terms, policies, addenda, and product documents appear to have been reorganized, including:
- Subscriber Terms
- Public Entity Addendum
- Licensed Software Terms
- API Terms
- Developer and Developer Sandbox Terms
- EU Data Act Addendum
- Privacy Statement and Privacy Commitment
- Data Processing Addenda
- Security and subprocessors materials
- StackAI Privacy Policy
- StackAI Platform Data Processing Addendum
Risk/impact: The diff appears partly to reflect website navigation or document-selection changes rather than substantive contractual revisions. However, the expanded or reorganized list of incorporated documents could make it more important to determine which terms apply to a particular customer, product, or use case. Customers should confirm whether any linked product-specific terms, AI terms, data-processing addenda, or public-sector terms are incorporated into their agreement.
2. Revised description of Asana’s services
The introduction changes the description of Asana’s offerings from a general reference to a “variety of Service” to:
> “team productivity, collaboration, and organizational tools, as further described in the Asana Guide and its Release Notes”
The terms now state that the Service includes the Websites and that the Terms govern use of “our Service and Websites.”
Risk/impact:
- The service description is broader and more expressly tied to the Asana Guide and Release Notes.
- Incorporating the Asana Guide and Release Notes may allow operational or product descriptions to influence the scope of the contractual Service.
- Customers should review those materials for provisions concerning functionality, data handling, AI features, service changes, or limitations.
3. AI-model training and use of customer data
No express change concerning AI training or the use of customer data to train AI models is visible in the supplied diff.
The diff does reference StackAI materials and a StackAI Platform Data Processing Addendum in the navigation, but it does not show substantive language addressing:
- Whether customer content may be used to train, fine-tune, or improve AI models;
- Whether data is used for model training by Asana or third-party providers;
- Opt-out or consent mechanisms;
- Retention or deletion of training data;
- Ownership of prompts, outputs, or derived model data; or
- Restrictions applicable to confidential, personal, or regulated information.
Risk/impact: The absence of visible AI-training language does not establish that customer data is excluded from training. Any applicable AI, StackAI, privacy, or product-specific terms should be reviewed separately.
4. Dispute-contact information
The diff shows the dispute-notice email address dispute-notice@asana.com in the prior text, but no corresponding replacement is apparent. The ending also contains apparent formatting or numbering changes around the legal-contact provision.
Risk/impact: If the dispute-notice address was removed or changed, this could affect compliance with any pre-litigation notice requirement. The final published version should be checked.
2026-08-26 · Terms
Summary of Important Changes
1. Updated description of the Service
The introduction has been substantially reorganized and clarified:
- The Service is now described as a variety of “team productivity, collaboration, and organizational tools.”
- The description refers to the Asana Guide and Release Notes as sources for further information about the Service.
- The definition of the Service continues to include Asana’s websites, including Asana.com, Wavelength, the blog, and the community site.
- The Terms are expressly described as a binding legal contract between the user and Asana governing use of the Service and Websites.
Potential risk: Incorporating the Asana Guide and Release Notes into the Service description may give those materials greater contractual significance. Customers should determine whether those documents can be changed unilaterally and whether changes could expand or alter the services covered by the Terms.
2. Broader or clearer application of the Terms
The revised language states that the Terms apply to the user “as a user…” The excerpt appears incomplete, so the full sentence should be reviewed. Depending on the remaining wording, this could clarify or expand which individuals, account users, or categories of users are bound by the Terms.
Potential risk: Organizations should confirm whether the Terms bind only the contracting customer or also employees, contractors, visitors, or other users accessing the account.
3. Dispute-contact language
The requirement to contact Asana before taking formal action remains, including the requirement to provide a brief written description of the dispute and contact information. The displayed change appears primarily formatting-related, including the presentation of Asana’s legal-contact email address.
Potential risk: No clear substantive change is visible, but customers should verify the final published email address and any applicable notice requirements before initiating litigation, arbitration, or another formal proceeding.
4. AI-model training and data use
No express change concerning AI training is visible in this diff. The excerpt does not add or remove language stating whether customer data, prompts, content, usage data, or other information may be used to train, fine-tune, evaluate, or improve AI models.
Because the diff includes navigation and formatting artifacts, the relevant privacy, data-processing, and StackAI terms may be located elsewhere or may not be reliably represented here. Customers should separately review those documents for:
- Whether customer content is used to train Asana’s or third-party AI models;
- Whether training use is opt-in, opt-out, or automatic;
- Whether de-identified or aggregated data may be used;
- Retention, deletion, and model-output treatment; and
- Whether enterprise or regulated-data exclusions apply.
2026-08-25 · Privacy
Summary
The provided diff does not include the actual contractual language. It only states:
> “Added approximately 212 words to the document”
Without the text of the additions, deletions, or replacements, it is not possible to reliably assess:
- Changes to rights, obligations, liability, warranties, or termination;
- New fees, restrictions, or service conditions;
- Changes to confidentiality, security, privacy, or data-retention terms;
- Whether the customer grants rights to use its data for analytics, product improvement, or artificial-intelligence training;
- Whether customer data may be used to train general-purpose or customer-specific AI models;
- Whether prompts, inputs, outputs, personal information, or derived data are included;
- Whether data is anonymized, aggregated, shared with third parties, or retained after termination; or
- Whether the customer has any opt-out, deletion, audit, or ownership rights.
AI Training and Data-Use Analysis
No AI-training or data-use change can be identified from the information provided. The actual 212 added words are required to determine whether the new language:
1. Authorizes training on customer content or usage data;
2. Limits training to de-identified or aggregated data;
3. Permits disclosure to affiliates, vendors, or model providers;
4. Gives the provider ownership or broad licensing rights;
5. Allows retention or reuse after the agreement ends; or
6. Provides an opt-out or requires express customer consent.
Information Needed
Please provide the full redlined text using the stated notation—for example:
- Additions:
{new language} - Deletions:
[removed language] - Replacements:
[old language]{new language}
A substantive legal-risk analysis cannot be completed from the word-count statement alone.
2026-08-23 · Privacy
2026-08-23 · Terms
Summary
The diff indicates that approximately 45 words were added to the document, but the actual added language is not provided. Without the text of those additions, it is not possible to determine their legal effect.
AI Training and Customer Data
- No specific language concerning the use of customer data to train, fine-tune, evaluate, or improve AI models is included in the diff.
- Accordingly, it cannot be determined whether the amendment:
- Permits or restricts AI training using customer data;
- Allows use of customer content in aggregated, de-identified, or anonymized form;
- Applies to inputs, outputs, metadata, usage data, or personal information;
- Grants the provider ownership or a broad license over customer data;
- Requires customer consent or provides an opt-out mechanism; or
- Imposes deletion, confidentiality, security, or retention obligations.
Other Legal Risks
The missing text may also affect important provisions such as:
- Confidentiality and data protection;
- Intellectual-property ownership and licensing;
- Service-provider rights to access or process data;
- Liability, indemnification, and compliance obligations;
- Data retention and deletion; and
- Changes to customer termination or audit rights.
Conclusion
No reliable legal analysis of the changes can be performed from a word-count description alone. The approximately 45 added words should be provided verbatim, together with any surrounding language, to assess whether they create new permissions, restrictions, or risks—particularly concerning the use of customer data to train AI models.
2026-08-23 · Privacy
2026-08-22 · Privacy
2026-08-19 · Terms
Summary
The supplied diff does not include the actual 45 added words—only a placeholder stating that approximately 45 words were added. As a result, it is not possible to determine:
- What contractual obligations or rights changed;
- Whether liability, indemnity, confidentiality, termination, or governing-law provisions were affected;
- Whether customer data may be collected, shared, retained, or disclosed differently; or
- Whether the customer’s data may be used to train, fine-tune, evaluate, or otherwise improve AI models.
AI-Training Review
No specific change concerning AI-model training can be identified from the information provided. The added language should be reviewed for terms such as:
- “train,” “fine-tune,” “develop,” “improve,” or “optimize” models;
- “service data,” “customer data,” “content,” “inputs,” or “outputs”;
- Use of data in “aggregated,” “de-identified,” or “anonymized” form;
- Rights to retain data after termination;
- Sharing data with affiliates, subprocessors, or third-party model providers; and
- Customer opt-out, deletion, confidentiality, or data-segregation rights.
Risk Assessment
Because the new text is missing, the legal and commercial risk cannot be assessed. Please provide the full diff, including the actual added wording and any surrounding provision.
2026-08-19 · Privacy
Between 2025-12-12 and 2026-01-04 · Privacy
2025-12-03 · Privacy
The publisher records this document as revised on this date (“DATED: DECEMBER 3, 2025”).
Between 2023-12-20 and 2025-03-30 · Privacy
Between 2019-11-13 and 2020-09-19 · Terms
Summary of Important Changes
1. Document and navigation changes
- The document appears to be reorganized and renamed in its navigation/header structure.
- New or more prominently displayed links include:
- Subscriber Terms
- Public Entity Addendum
- Licensed Software Terms
- API Terms
- Developer Terms and Developer Sandbox Terms
- EU Data Act Addendum
- Privacy Statement and Privacy Commitment
- Data Processing Addendum
- Subprocessors and security materials
- StackAI Privacy Policy
- StackAI Platform Data Processing Addendum
- These changes may make additional terms or policies more visible or potentially applicable, but the diff does not clearly state that all linked documents are incorporated into the User Terms. Customers should confirm which linked terms govern their particular product or subscription.
2. Revised description of the Service
The introduction has been substantially rewritten:
- The prior wording described Asana as offering a “variety of” services and referred generally to the “Asana Guide” and “Release Notes.”
- The revised wording describes Asana as offering “team productivity, collaboration, and organizational tools,” as further described in the Asana Guide and Release Notes.
- The revised text expressly defines the “Service” to include the websites, including Asana-related websites such as asana.com, wavelength.com, blog.asana.com, and community.asana.com.
- The Terms now expressly state that they apply to the user’s use of both the Service and Websites.
Potential risk
The expanded definition of “Service” may broaden the activities covered by the User Terms beyond the core Asana application to include Asana websites and related online properties. Users should check whether provisions concerning acceptable use, intellectual property, disclaimers, liability, or dispute resolution now apply to website use as well as the application.
3. AI training and use of customer data
- No substantive change concerning the use of customer data to train AI models is visible in the supplied diff.
- The diff includes references to “StackAI Privacy” and a “StackAI Platform Data Processing Addendum,” but these appear primarily as navigation or linked-document changes. The provided text does not show:
- permission to use customer data for AI or machine-learning training;
- a prohibition on such use;
- whether customer content is used to train general-purpose or service-specific models;
- opt-out rights;
- retention or deletion rules for AI training data; or
- restrictions on human review or disclosure of prompts, outputs, or customer content.
Recommended follow-up
Review the complete Privacy Statement, StackAI Privacy Policy, applicable Data Processing Addendum, and any product-specific AI terms. Those documents may contain the operative AI-data provisions even though they are not substantively reproduced in this diff.
4. Dispute notice contact
- The prior dispute-resolution language listed
dispute-notice@asana.com. - That email address appears to have been deleted, with no replacement shown in the diff.
Potential risk
Removing the designated dispute-notice address could create uncertainty about how a customer must provide the required pre-suit dispute notice. Confirm the current notice procedure and whether another address or delivery method has been substituted.
5. Apparent formatting artifacts
- The ending reference to
legal@asana.com.13.appears malformed and may be a document-rendering or versioning artifact rather than a substantive legal change.
Between 2018-10-04 and 2019-11-13 · Terms
Between 2017-05-18 and 2018-10-04 · Terms
Between 2015-12-18 and 2017-05-18 · Terms
Between 2014-08-02 and 2015-12-18 · Terms
Between 2011-11-04 and 2014-08-02 · Terms