Yes he can "hold your emails and files hostage" and yes, if you agreed to the contract than you have to pay, and yes if you willfully take services with no intent of paying (i.e. paying, getting your files, and chargeback from paypal) you are commiting fraud and theft.