What Asana's terms say about your data

Who owns the data the customer puts in?

The customer · covers content Free users submit (Personal plan)

1. Headline Starter, Advanced, Enterprise, Enterprise+ covers all customer data on paid plans (tasks, projects, comments, messages, files)

   The customer

   As between the parties, Customer and its licensors will retain all right, title, and interest in and to all intellectual property rights in Customer Data.

   Subscriber Terms (paid plans) (terms), read 2026-10-23 · link to this fact

   Subscriber Terms 7.2. Next sentence grants Asana a non-exclusive license to use Customer Data "solely to (a) provide and support the Services and (b) improve the Services" as long as neither the customer nor its users are publicly identified (see aggregate_use detail). Applies to customers on an Order Form; a separate written agreement replaces these terms.

2. Headline Personal covers content Free users submit (Personal plan)

   The customer

   Free Users maintain ownership of the User Content that they submit to the Service

   User Terms of Service (terms), read 2026-10-23 · link to this fact

   User Terms of Service 8.2. The license Free Users grant runs "in order to provide the Service, and as permitted by Asana's Privacy Statement".

3. Supporting Every plan covers content submitted by members of a paid customer's domain

   The customer

   User Content submitted to the Service by Managed Users is Customer Data, which is owned and controlled by the Customer, in accordance with the Customer Agreement.

   User Terms of Service (terms), read 2026-10-23 · link to this fact

   User Terms of Service 8.3: an employee's tasks and comments belong to the paying company, not the individual.

4. Detail Every plan covers Asana AI input and output

   The customer

   As between the parties and to the extent permitted by applicable law, Customer retains all right, title, and interest in AI Input and AI Output.

   Product-Specific Terms (Asana AI and add-ons) (terms), read 2026-10-23 · link to this fact

   Product-Specific Terms, Asana AI, Ownership. Preceding sentence: "Customer Data includes AI Input and AI Output."

Does the vendor train AI on it?

Generative: no. Other models: opt-out^* · covers all customer data, for the generative models behind Asana AI; metadata about the domain's use of Asana (not stated to include task text)

1. Headline Every plan covers all customer data, for the generative models behind Asana AI

   Generative: no

   For purposes of clarity, Asana does not use or permit third-party AI partners to use Customer Data to train generative artificial intelligence models used to provide Asana AI.

   Product-Specific Terms (Asana AI and add-ons) (terms), read 2026-10-23 · link to this fact

   Product-Specific Terms, Improving Asana AI. Narrow wording: it covers generative models "used to provide Asana AI"; other machine learning models are covered by the Privacy Statement (other_models headline). Personal (free) has no Asana AI features per the pricing grid.

2. Headline Every plan covers metadata about the domain's use of Asana (not stated to include task text)

   Other models: opt-out^*

   When features powered by Asana AI are enabled in your domain, we use metadata related to your domain's use of Asana to train machine learning models.

   Privacy Statement (privacy policy), read 2026-10-23 · link to this fact

   Privacy Statement, Artificial Intelligence and Machine Learning. Next sentence: these models "power features, both in your domain and other Asana domains." Opt_out is our reading: training follows from Asana AI being enabled, and the same section says "Admins and Super Admins can adjust AI preferences for your domain at any time by visiting the admin console"; the Subscriber Terms (7.2) add that the customer "can control whether Customer Data is used for product improvement purposes via the Asana Admin Console." Whether AI is on by default is in the Help Center AI articles, which we could not read. The admin console is on Starter and up, so Personal users have no such switch.

3. Supporting Starter, Advanced, Enterprise, Enterprise+ covers customer data used to improve the Services (paid plans)

   Other models: opt-out

   Notwithstanding the foregoing Section 7.2(b), Customer can control whether Customer Data is used for product improvement purposes via the Asana Admin Console.

   Subscriber Terms (paid plans) (terms), read 2026-10-23 · link to this fact

   Subscriber Terms 7.2. Section 7.2(b) licenses Asana to use Customer Data to "improve the Services" as long as it is treated as confidential and the customer is not publicly identified. The terms do not say whether improvement includes model training; we read it as the contract hook for the opt-out.

4. Supporting Every plan covers customer data sent to third-party LLM providers

   Generative: no

   Our third-party LLM service providers are contractually prohibited by us from using customer data to train their models.

   Privacy Statement (privacy policy), read 2026-10-23 · link to this fact

   Privacy Statement, Artificial Intelligence and Machine Learning.

5. Detail Every plan covers customer data sent to AI partners

   Generative: no

   Asana's AI partners don't use your data to train their models and are required to delete it after each query.

   Asana AI product page (trust section and FAQ) (ai policy), read 2026-10-23 · link to this fact

   Answer to the page's own FAQ "do you use my data to train AI models?" It speaks only of partners, not of Asana's own models; the Privacy Statement covers those (metadata, other_models headline).

6. Detail Every plan covers project interaction data for Asana ML recommendations

   Other models: opt-out

   If Asana ML features are disabled in the admin console, users will only receive a generic list of recommended projects in Asana.

   Privacy Statement (privacy policy), read 2026-10-23 · link to this fact

   Privacy Statement, How We Use Your Information. Preceding sentence: Asana ML uses "a collaborative filtering machine learning model, which infers relationships between users and projects".

Does the vendor keep a right to use it aggregated, de-identified or as usage data?

Reserved · covers customer personal data in customer content

1. Headline Every plan covers customer personal data in customer content

   Reserved

   to de-identify or aggregate such Customer Personal Data for analysis and Service improvement, provided that Asana shall not make any attempt to re-identify such de-identified or aggregate data

   Data Processing Addendum (data processing addendum), read 2026-10-23 · link to this fact

   DPA, Asana's permitted processing, item (d). Holds on every plan the DPA covers.

2. Supporting Every plan covers information about how people use Asana (counts of tasks, projects)

   Reserved

   We may use such aggregated and de-identified data for any purpose, including but not limited to, research and marketing purposes and may also disclose such data to any third parties, including advertisers, promotional partners, sponsors, event promoters, and/or others.

   Privacy Statement (privacy policy), read 2026-10-23 · link to this fact

   Privacy Statement, Aggregated and de-identified data. The preceding sentence gives the example "how many tasks or projects you created".

3. Detail Starter, Advanced, Enterprise, Enterprise+ covers all customer data on paid plans

   Reserved^*

   improve the Services as long as (i) such data is used in accordance with Section 6 (Confidentiality) of this Agreement and (ii) neither Customer nor its End Users are publicly identified.

   Subscriber Terms (paid plans) (terms), read 2026-10-23 · link to this fact

   Subscriber Terms 7.2(b). Not an aggregation clause by name; we read "not publicly identified" use for improvement as a de-identified use right. The customer can switch product improvement off in the Admin Console (same section).

What can the customer export, and who can run it?

• With Compliance management add-on on Enterprise: Everything by an admin through an admin screen or the API^* (covers whole organization: all projects, tasks, comments and custom fields)

1. Headline Personal, Starter, Advanced covers project data and reports, one project at a time

   Part of it by any member through a self-serve screen^*

   Export your project data and reports in CSV or PDF format to share with stakeholders or analyze in other tools.

   Asana pricing (plan comparison) (plans page), read 2026-10-23 · link to this fact

   Pricing grid, Reporting: "CSV and PDF export" on all five plans; "Organization exports" is blank on Personal, Starter and Advanced. Scope partial and who=any_user are our reading; the Help Center article on project exports (which also covers JSON per project) could not be read. The REST API can read tasks on every plan, but no bulk export is promised.

2. Headline Enterprise covers project data, reports, portfolios and dashboards; graph exports by API

   Part of it by any member through a self-serve screen or the API^*

   Graph exports are currently available to users in an Enterprise/Enterprise+ organization.

   Exports (API reference) (help article), read 2026-10-23 · link to this fact

   Graph exports return JSON for a goal, team, portfolio or project. Pricing adds "PowerPoint export (portfolios, dashboards)" and "Portfolio summary report (PDF export)" on Enterprise. A whole-organization export needs the Compliance management add-on on this plan (see add-on fact). Scope partial is our reading.

3. Headline Enterprise with Compliance management add-on covers whole organization: all projects, tasks, comments and custom fields

   Everything by an admin through an admin screen or the API^*

   Create a complete JSON backup of your entire Asana organization, including all projects, tasks, comments, and custom fields for data backup, compliance, and system integration.

   Asana pricing (plan comparison) (plans page), read 2026-10-23 · link to this fact

   Pricing grid, Organization exports: "Compliance mgmt. add-on" on Enterprise, included on Enterprise+. Who=admin and admin_screen are our reading (the Help Center steps could not be read); the API route is the organization_export endpoint.

4. Headline Enterprise+ covers whole organization: all projects, tasks, comments and custom fields

   Everything by an admin through an admin screen or the API^*

   Create a complete JSON backup of your entire Asana organization, including all projects, tasks, comments, and custom fields for data backup, compliance, and system integration.

   Asana pricing (plan comparison) (plans page), read 2026-10-23 · link to this fact

   Pricing grid: Organization exports included on Enterprise+. Plus CSV, PDF and PowerPoint exports and graph exports as on Enterprise. Who=admin is our reading.

5. Supporting Enterprise+ covers whole organization, by API

   Everything by an admin through the API

   An organization_export object represents a request to export the complete data of an organization in JSON format.

   Organization exports (API reference) (help article), read 2026-10-23 · link to this fact

   API reference. Exports "can take a long time, from several minutes to a few hours for large organizations"; the file is gzip JSON at a short-lived download URL. The reference page does not name the plans; the pricing grid does.

6. Supporting Every plan covers organization-level export and deletion

   Everything by an admin through an admin screen or the API

   Asana allows customers to export and delete data at the organization level and automate full-domain exports through our API

   Trust Center (help article), read 2026-10-23 · link to this fact

   Trust Center, Data governance. No plan named here.

7. Detail Every plan covers all customer data, EU customers switching provider

   Everything by an admin through a support request, once the vendor approves

   Asana will provide the necessary instructions, as required under the EU Data Act, for the Customer to export its Customer Data.

   EU Data Act Addendum (switching and deletion) (terms), read 2026-10-23 · link to this fact

   EU Data Act Addendum, Switching Request: filed by the Super Admin through Asana's form, after a two-month notification period; the export must be done within 30 days after it, and Asana "may, at its discretion, charge the Customer reasonable charges in relation to switching". EU customers only.

How much history does the plan keep?

All of it^* · covers tasks, projects, comments, messages and files while the account is active

1. Headline Every plan covers tasks, projects, comments, messages and files while the account is active

   All of it^*

   Asana activity logs automatically track important changes to a task, giving teams visibility into task history and accountability.

   Asana pricing (plan comparison) (plans page), read 2026-10-23 · link to this fact

   Pricing grid: "Unlimited tasks", "Unlimited comments", "Unlimited messages", "Unlimited storage, 100MB per file" and "Activity logs" on all five plans. No terms document or readable help article sets a time limit on content, so keeps=all is our reading. Deleted items have a recovery window (search results show 30 days) in a Help Center article we could not read. A beta data retention policy feature also exists there (unread).

2. Supporting Every plan covers customer personal data

   All of it^*

   For as long as necessary to provide the Service as described in the Agreement, as legally or contractually required, or upon receipt of Customer's written request for deletion.

   Data Processing Addendum (data processing addendum), read 2026-10-23 · link to this fact

   DPA Annex, retention period of personal data. keeps=all is our reading of "as long as necessary to provide the Service".

3. Detail Every plan covers backups of customer data

   All of it^*

   Asana will perform regular backups of Customer Data and ensure that backups have the same protections in place as production databases.

   Data Security Standards (terms), read 2026-10-23 · link to this fact

   Data Security Standards 4.5. No backup retention period is stated here; after termination, backups go within 30 days after the 180-day destruction window (Subscriber Terms 5.4).

How long is data kept after the account ends, and can it still be exported?

1. Headline Starter, Advanced, Enterprise, Enterprise+ covers all customer data on paid plans

   30 days to export

   Asana will make Customer Data available to Customer for export as long as Asana receives written notice within thirty (30) days after the effective date of expiration or termination from Customer.

   Subscriber Terms (paid plans) (terms), read 2026-10-23 · link to this fact

   Subscriber Terms 5.4. The export window needs written notice within 30 days; the preceding sentence lets Asana "immediately deactivate Customer's account(s)". Next sentence: after 30 days Asana has "no obligation to retain Customer Data" and may delete it. DPA: on termination and a verified request, Asana "will delete Customer Personal Data"; without one it "may delete" it in line with the law. EU customers can also file a Deletion Request under the EU Data Act Addendum, effective two months after receipt.

2. Detail Starter, Advanced, Enterprise, Enterprise+ covers all customer data, including backups, on request

   Kept 210 days, no export^*

   Asana will, within one-hundred and eighty (180) days of receipt of such request, securely destroy all Customer Data from its systems

   Subscriber Terms (paid plans) (terms), read 2026-10-23 · link to this fact

   Subscriber Terms 5.4, on a request logged at the Help Center; "all back-ups will be deleted within thirty (30) days after such one-hundred and eighty (180) day period". 210 days is our sum of the two limits, counted from the request, not from termination.

3. Supporting Every plan covers customer personal data

   None, export before the account ends

   Customer may request deletion of data at any time and Customer Personal Data is deleted or anonymized upon termination of the Agreement.

   Data Processing Addendum (data processing addendum), read 2026-10-23 · link to this fact

   DPA Annex, measures for limited data retention. No day count; export_window false because this sentence offers none (the Subscriber Terms do).

What the read couldn't settle

• Plans are the five columns of the live pricing grid (Personal free, Starter, Advanced, Enterprise, Enterprise+), not grouped; legacy plans (Premium, Business) are left out.
• The Help Center (help.asana.com/s/) is a Salesforce site that sends a signed-out plain fetch only a JavaScript shell (old /hc/ links redirect to a login), and a page-reading fetch saw navigation only. Eight Help Center articles are listed js_only and unread: AI features and admin controls, AI FAQ, privacy and security (organization export steps), project import and export, recovering deleted items, data retention policy, deleting an account, canceling a plan. No fact cites them.
• Because the two Help Center AI articles (kind ai_policy) are unread, no cell may say not_stated yet.
• AI training: the generative 'no' comes from the Product-Specific Terms; the Privacy Statement separately says Asana trains machine learning models on domain metadata when Asana AI is on. Whether Asana AI is on by default, and whether the admin switch stops metadata training, is in the unread Help Center AI article. other_models opt_out is inferred.
• Export who and method for the organization export (admin, admin console) are inferred; the Help Center steps are unread. Whether Personal/Starter/Advanced can export a project as JSON is in the unread project export article.
• Retention keeps=all is inferred from the pricing grid's unlimited tasks, comments and messages; the 30-day recovery window for deleted items and the beta data retention policy feature are in unread Help Center articles.
• Personal (free) after_cancel has no headline: the User Terms of Service say nothing on data after an account ends, and the Help Center deletion article is unread.
• Subscriber Terms version is their Last Updated date (2026-09-01; they apply to Order Forms from 2026-09-16). Product-Specific Terms: last updated 2026-10-01, effective 2026-10-05. Enterprise customers with a signed MSA may have different terms.
• asana.com/terms/privacy-commitment now redirects to asana.com/privacy; not used.

Documents

12 of 20 read. Each fact above names the one it comes from.

1. Subscriber Terms (paid plans) Terms · version 2026-09-01 · read 2026-10-23
2. User Terms of Service Terms · version 2024-01-01 · read 2026-10-23
3. Product-Specific Terms (Asana AI and add-ons) Terms · version 2026-10-01 · read 2026-10-23
4. EU Data Act Addendum (switching and deletion) Terms · version 2025-09-12 · read 2026-10-23
5. Data Security Standards Terms · version 2023-01-04 · read 2026-10-23
6. Data Processing Addendum Data processing addendum · version 2026-09-01 · read 2026-10-23
7. Privacy Statement Privacy policy · version 2026-09-01 · read 2026-10-23
8. Asana AI product page (trust section and FAQ) AI policy · read 2026-10-23
9. Asana AI features and admin controls (Help Center) AI policy · not read yet · renders with javascript only
10. Asana AI FAQ (Help Center) AI policy · not read yet · renders with javascript only
11. Trust Center Help article · read 2026-10-23
12. Organization exports (API reference) Help article · read 2026-10-23
13. Exports (API reference) Help article · read 2026-10-23
14. Privacy and security (Help Center, organization export steps) Help article · not read yet · renders with javascript only
15. Project importing and exporting (Help Center) Help article · not read yet · renders with javascript only
16. Recover deleted tasks, projects and more (Help Center) Help article · not read yet · renders with javascript only
17. Data retention policy (Help Center) Help article · not read yet · renders with javascript only
18. Delete your Asana account (Help Center) Help article · not read yet · renders with javascript only
19. How to cancel your Asana plan (Help Center) Help article · not read yet · renders with javascript only
20. Asana pricing (plan comparison) Plans page · read 2026-10-23