The user's Exchange server mailbox where the add-in is installed. Because these settings are stored in the user's server mailbox, they can "roam" with the user and are available to the add-in when it is running in the context of any supported client accessing that user's mailbox.
Reference:
https://docs.microsoft.com/en-us/office/dev/add-ins/outlook/manage-state-and-settings-outlook