they're public or private. that is up to you. for example, i run a private relay for my family. it's only writeable by a certain list of npubs, but everyone in the world can read from it.
if you want it to be a paid relay, nostream has these options built into it, you just need to enable that feature in the configuration settings.