for now, everything is public. however if a company wants to run their relays then the same setup is enough to run a private instance. they need to use a browser extension to login and set their private relays in the extension