That sounds spicily illegal to my (admittedly EU-based) eyes, unless it’s literally written into the contract.