How does Relay access my Asana account?

Through Asana's own sign-in (OAuth) — you approve Relay on Asana's website, and Asana hands Relay a limited authorisation to act on your behalf. Relay never sees your Asana password. It uses that access only to create and update the tasks, sections and projects you push, and to upload note PDFs if you've turned attachments on. The authorisation is sealed with your Mac's secure storage, and disconnecting the Asana card removes it. You can also revoke Relay's access any time from Asana itself — in Asana's settings, under Apps — and if the sign-in ever expires, the Asana card simply shows an amber Reconnect button that repeats the same 30-second flow.