Yes, like all things nostr, the data is public. In case an organization/individual wants to do this in private, they need to connect to private relays [right now supported using the NIP-07 browser extension - the extensions allow you to set preferred relays]