Unless what you're getting is really explicitly spelled out in a contract, you should flatly assume that they're doing whatever they like whenever they like.
Even if it's in the contract, but can't be verified.
Even if it's in the contract, but can't be verified.