Hi Fabio,
passwords are stored locally in a secure encrypted form. Nothing is stored on Avast servers, unless you turn on the Backup & Synchronization feature. In that case, we use end-to-end encryption, so your passwords encrypted locally and stored on our servers without decryption keys, so no-one (even Avast) is able to decrypt them.