HireDesk is the office system for a recruitment and staffing agency: a CV bank your recruiters can actually search, a board for every job, shortlists you send to employers without giving away the candidates' contact details, overseas placements with their documents and passports, fee invoices, and your own jobs website. It replaces the shared drive of CVs, the Excel candidate list, CVs forwarded from Gmail and the WhatsApp group per job. Built for agencies placing people at home and abroad, in any country and currency.

CV bank
- Add a CV in seconds: drop the file (PDF, Word, text or a photo) and the name, email and phone are read from it for you, on a phone too
- One person, one record: the same email, phone or passport number adds a new CV version to the existing person instead of a duplicate; possible duplicates by name and date of birth are flagged, with a merge
- Search the words inside every CV and profile, with filters for skills, experience, nationality, languages, availability, salary, passport validity and "ready to work overseas"; each result shows why it matched
- Saved lists, a timeline per person (calls, WhatsApps, notes, applications)
- Import an Excel/CSV list (columns guessed, checked row by row before anything is saved) or a zip of up to 2,000 CVs, read in small steps so shared hosting never times out — and roll an import back

Jobs and the pipeline
- A board per job: New → Screened → Shortlisted → Submitted → Interview → Offered → Placed, one tap or a drag to move someone on; stage tabs on a phone
- A WhatsApp button with a ready message for each stage, and Call
- "Find candidates" opens the CV bank with the job's requirements filled in

Shortlists that protect your fee
- Send candidates to an employer as an anonymised, agency-branded profile: name as first name and initial, experience, skills, your consultant's note — never the phone, email or CV file until you release them
- Every submission is a permanent record of who sent whom, to which employer, when; sending the same person to the same employer again inside the protection period is blocked and names the first submission
- Employers answer from a private link or their portal: shortlist, request an interview with proposed times, not suitable with a reason

Employer portal and website requests
- Employers sign in to see their vacancies, the candidates sent, interviews coming up and their invoices; they request new vacancies, which you approve
- A public "Request staff" form for companies that do not have an account yet

Overseas placements
- A case per placement abroad: documents with expiry dates (passport, medical, police, visa, contract, ticket — your own list), stages to arrival, stuck cases flagged
- Passport custody: where each passport is right now and every movement
- Scans in private storage, opened only by permitted staff, every view logged, deleted automatically a set time after the case closes

Money (admins only)
- Fee agreements per employer: percentage of salary, a fixed fee per hire or per job, guarantee period with free replacement or credit
- The fee invoice is drafted when someone is placed; issued invoices never change; part payments, credit notes, refunds and reversals; what each client owes by age; overdue reminders
- Several currencies: salaries in their own currency, the rate frozen on the placement

Messages
- Email through your own mail account; SMS through SMSlenz or Twilio (your own account with the provider)
- Interview confirmations and reminders to candidates and employers, feedback reminders, overdue invoices, expiring documents, job alerts for candidates; each sent once, quiet hours for SMS, every message in a log with its result
- Consent recorded with its date; re-consent asked after two years without activity, then the person is anonymised if nobody answers (your settings)

Your website
- Jobs with search and filters, a page and an apply form for each job, an employers page, services, about, contact, blog, privacy and terms; two looks, your logo and colours; phone-first
- Every open job carries the structured data Google for Jobs reads; the employer's name never appears on the website
- Candidate accounts: sign-up with an emailed code, application status in plain words, profile and new CV, download my data, delete my account

Reports
- Placements and fees by month, recruiter, branch, employer or type of job; the pipeline funnel and time to fill; which sources bring placements; receivables by age; overseas cases; CV bank growth — each with CSV

Languages
- The website, candidate accounts and candidate messages in English, Sinhala, Tamil and Arabic (right to left). The staff screens and the employer portal are in English; any wording can be translated or changed on Settings → Translations, and more languages added
- The Sinhala, Tamil and Arabic wording is a first draft and is being reviewed by native speakers; you can change any wording from the admin

Built for shared hosting
- Upload the zip, open your domain, follow the web installer — no SSH, no Composer, no Node, no build step, no queue worker; one cron line
- Updates from the admin: upload the new version and press Update; your data, uploads and settings are never touched
- Branches and two staff roles (admin, recruiter), an audit trail, idle sign-out, your logo on everything

Requirements
- PHP 8.2+ with pdo_mysql, mbstring, openssl, tokenizer, xml, ctype, fileinfo, intl, gd, zip and curl; MySQL 8 or MariaDB 10.6+; Apache with .htaccess; one cron job; an email account for sending

What's included
- The full PHP source, the installer, sample data to try everything, the user guide, the installation and update guides
- Updates and support: [YOUR UPDATE PERIOD AND SUPPORT TERMS]

Your responsibilities
- HireDesk keeps CVs, contact details and, for overseas placements, passport scans, medical results and police certificates. It gives you the tools (private files, logs, consent, export and erasure), but the data-protection and recruitment-licensing rules of your country apply to you: have your own lawyer write your privacy text and terms

1. Create an empty MySQL database and a user for it in your hosting panel.
2. Upload the HireDesk zip into your domain's folder and extract it there.
3. Open your domain — the installer starts: server check, database, then your agency, your owner sign-in and the licence key from your CodeCrate account.
4. Add the one cron job (every minute) shown in INSTALL.md.
5. Sign in at /admin. The dashboard's "Welcome to HireDesk" box lists the first steps; "Load sample data" fills an empty install with invented data to try everything first.

Updates: download the new zip from your CodeCrate account and apply it from Settings → System update. Your data, uploads and settings are never overwritten.

Set up in this order: agency details and logo → email → staff and branches → currencies, languages and job categories → employers and fee agreements → invoices → messages → the website → overseas documents and stages. Then bring your existing CVs in with Candidates → Imports. Every day: add CVs, search, run each job's board, send shortlists, book interviews, place people, invoice. The full guide, USER-GUIDE.md, is in the download.