Data used within the Databricks platform is controlled by the customer and sits on your own VPC.
Some types of data (such as partial query results, command logs executed from a notebook) will get transferred and/or stored on Databricks accounts (for not more than 30 days) in an encrypted fashion.