PLM Connect Privacy Policy

Application: PLM Connect (iOS, Android) · Publisher: SteepGraph Systems · Effective date: 28 September 2026

Your privacy is critical to us. This Policy explains how the PLM Connect App collects, uses, shares and protects personal information. Before or at the time of collecting personal information, we identify the purposes for which it is being collected; we collect and use it only for those purposes unless we obtain the consent of the individual concerned or as required by law; and we retain it only as long as necessary for those purposes.

1. Who is responsible for your data

PLM Connect connects to an Aras Innovator environment that is owned and administered by your Organisation. For the business data you view and create in the App (tasks, problem reports, parts, documents, discussions and attachments), your Organisation is the data controller and its own privacy policy applies. SteepGraph Systems, as publisher of the App and operator of its authentication service, processes limited information on your Organisation’s behalf as described below.

2. Information we collect

Sign-in credentials. Your Aras username and password, entered at login. Why it is used: to authenticate you and obtain a short-lived access key for your Organisation’s Aras environment. Your password is transmitted over an encrypted connection and is not stored on your device or by SteepGraph Systems.
Account profile. Name, login name, email address, department, role and Aras identity, as held in your Organisation’s Aras environment. Why it is used: to display your profile, show items assigned to you, and attribute actions (approvals, comments, reports) to you.
Profile picture (optional). A photo you choose from your library or take with the camera. Why it is used: to display as your avatar in the App.
Photos and files (optional). Images captured with the camera, images selected from your photo library, documents you select, and any annotations you draw on them. Why it is used: to attach to Problem Reports and other items at your request. These are uploaded only to your Organisation’s Aras environment.
Business content. Tasks, problem reports, parts, documents, relationships, discussion messages and @mentions you view, create or update. Why it is used: to provide the App’s core functionality. This content is read from and written to your Organisation’s Aras environment.
App settings. Theme and display preferences, offline-mode setting, onboarding progress, and notification read status. Why it is used: to remember your configuration between sessions. Stored on your device only.

3. Device permissions

Camera — used only when you choose to capture a photo for a Problem Report or your profile picture.
Photo library — used only when you choose to attach an existing photo or pick a profile picture. The App does not save anything to your photo library.

The App does not access your location, microphone, contacts, calendar, or health data, and requests no permission in the background. You may revoke camera or photo access at any time in your device settings; the rest of the App will continue to work.

4. What we do not do

We do not use analytics, advertising or tracking SDKs, and we do not track you across other companies’ apps or websites.
We do not sell, rent or trade personal information.
We do not use your data for advertising or profiling.
We do not collect device identifiers for tracking purposes.

5. How information is shared

Personal information is shared only as necessary to operate the App:

Your Organisation’s Aras Innovator environment — which may be hosted by your Organisation or by Aras Corporation on its cloud platform — receives your credentials for authentication and all content you view, create or upload.
SteepGraph Systems authentication service — receives your username and password over HTTPS solely to issue a short-lived access key for your Aras environment. Credentials are not retained after the key is issued.
Connectivity check — to tell whether you are online, the App periodically sends an empty request to a Google connectivity endpoint. It contains no personal information or App data; as with any internet request, the receiving server sees your device’s IP address.
Legal requirements — we may disclose information where required by law, regulation, legal process or an enforceable governmental request.

6. Storage and security

We protect personal information with security safeguards appropriate to its sensitivity, against loss or theft and against unauthorised access, disclosure, copying, use or modification. In particular:

All network communication uses encrypted HTTPS (TLS) connections.
Session information and settings are stored in the device’s secure storage (iOS Keychain / Android Keystore).
Records the App keeps on the device so it can show them quickly or offline — including items you save for offline use and the files attached to them — are encrypted with AES-256 in a private, app-only storage area, with the key held in the device’s secure storage.
Problem reports and comments you create while offline are kept encrypted on the device until they are sent to your Organisation’s Aras environment, and are then removed from the device.
Screenshots and screen recording are blocked within the App on supported devices to reduce the risk of accidental disclosure of confidential engineering data.
Signing out removes your session and deletes all records, files and settings tied to your account from the device. If you have changes that have not yet been sent, the App warns you before they are discarded.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Data retention

On your device: session data, cached records and saved files are kept until you sign out or uninstall the App; changes made offline are kept only until they are sent. Display settings are kept until you uninstall the App.
SteepGraph Systems: we do not keep your password. Short-lived access keys expire automatically.
Your Organisation’s Aras environment: content you create (for example, Problem Reports, comments and attachments) is retained according to your Organisation’s own policies.

8. Your rights and choices

Depending on where you live (for example, under India’s Digital Personal Data Protection Act, 2023, the EU/UK GDPR, or applicable US state laws), you may have the right to access, correct, delete or obtain a copy of your personal information, to withdraw consent, and to lodge a complaint with a data-protection authority. Because your account and business data are controlled by your Organisation, requests about that data should normally be directed to your Organisation’s Aras administrator. For requests relating to the App or our authentication service, contact us using the details in section 14.

9. Account and data deletion

PLM Connect does not create a separate account; you sign in with an account issued by your Organisation. You can remove all data the App stores on your device at any time by signing out (Profile › Sign Out) or uninstalling the App. To have your underlying Aras account or its content deleted, contact your Organisation’s Aras administrator. You may also email us at support@steepgraph.com and we will help route your request.

10. International transfers

Your information may be processed in countries other than your own, including India and wherever your Organisation’s Aras environment is hosted. Where required, we rely on appropriate safeguards for such transfers.

11. Children’s privacy

The App is a business tool intended for use by adults in a professional setting. It is not directed at children under 16, and we do not knowingly collect personal information from children.

12. Our commitment

We collect personal information only by lawful and fair means and, where appropriate, with the knowledge or consent of the individual concerned. Personal information should be relevant to the purposes for which it is used and, to the extent necessary for those purposes, accurate, complete and up to date. We will make our policies and procedures for the management of personal information readily available to our customers. We are committed to conducting our business in accordance with these principles so that the confidentiality of personal information is protected and maintained.

13. Terms of Use

These terms govern your use of the App. They sit alongside this Privacy Policy.

13.1 Acceptance of these terms

By downloading, installing, accessing or using the PLM Connect mobile application (the “App”), you agree to be bound by these Terms and Conditions of Use and this Privacy Policy, and by all applicable laws and regulations. If you do not agree with any of these terms, you are not permitted to use the App. The App and its materials are protected by applicable copyright and trademark law.

PLM Connect is a companion application for the Aras Innovator® product lifecycle management (PLM) platform. It is intended for use by employees and authorised users of organisations that operate an Aras Innovator environment (your “Organisation”). Access requires a valid account issued by your Organisation.

13.2 Use License

SteepGraph Systems grants you a limited, non-exclusive, non-transferable, revocable licence to install and use the App on devices you own or control, solely to access your Organisation’s Aras Innovator environment for its business purposes. This is a licence, not a transfer of title, and under this licence you may not:

modify, copy or create derivative works of the App;
decompile, reverse engineer, disassemble or attempt to derive the source code of the App;
remove any copyright or other proprietary notices from the App;
use the App to access data you are not authorised to access, or to circumvent any security control; or
transfer, sublicense or “mirror” the App on any other server or distribution channel.

This licence terminates automatically if you breach any of these restrictions, and may be terminated by SteepGraph Systems or by your Organisation at any time. On termination you must stop using the App and delete it from your devices.

13.3 Disclaimer

The App is provided “as is” and “as available”. SteepGraph Systems makes no warranties, expressed or implied, and hereby disclaims all other warranties, including without limitation implied warranties of merchantability, fitness for a particular purpose, and non-infringement of intellectual property or other rights. SteepGraph Systems does not warrant the accuracy, completeness or reliability of any data displayed in the App; that data originates from, and remains the responsibility of, your Organisation’s Aras Innovator environment.

13.4 Constraints

In no event shall SteepGraph Systems or its suppliers be liable for any damages (including, without limitation, damages for loss of data or profit, or due to business interruption) arising out of the use of, or inability to use, the App, even if SteepGraph Systems or an authorised representative has been notified orally or in writing of the possibility of such damage. Because some jurisdictions do not allow limitations on implied warranties or limitations of liability for consequential or incidental damages, these limitations may not apply to you.

13.5 Amendments and Errata

The App and its content may include technical, typographical or functional errors. SteepGraph Systems does not warrant that any of the materials in the App are accurate, complete or current. SteepGraph Systems may make changes to the App, including through updates distributed via the Apple App Store and Google Play, at any time without notice, but does not commit to updating the App.

13.6 Links

The App may contain links to external websites, including the SteepGraph website and your Organisation’s own resources. SteepGraph Systems has not reviewed all such sites and is not responsible for their content or privacy practices. The inclusion of a link does not imply endorsement by SteepGraph Systems. Use of any linked site is at the user’s own risk.

13.7 Terms of Use Modifications

SteepGraph Systems may revise these Terms of Use and this Privacy Policy at any time. When we make material changes we will update the “Last updated” date above and, where appropriate, notify you within the App. By continuing to use the App after changes take effect, you agree to be bound by the then-current version.

13.8 Governing Law

These terms, and any claim relating to the App, are governed by the laws of India, without regard to its conflict-of-law provisions. Subject to any mandatory rights you have under the laws of your country of residence, the courts of Pune, Maharashtra, India shall have exclusive jurisdiction.

14. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact SteepGraph Systems Pvt. Ltd.:

Registered office: C3-503, Kunal Icon, Pimple Saudagar, Pune, Maharashtra 411027, India
Operating office: 5A, Indialand Global Tech Park, Phase 1, Hinjawadi, Pune 411057, India
Email: support@steepgraph.com

Aras and Aras Innovator are trademarks of Aras Corporation.