Start here. This is the direct spoken answer to practice first.
Overview
There is no single Django folder for all business logic; ownership follows the rule and its dependencies.
I keep behavior that protects one entity's state close to the model, and reusable database selection or set-based operations in custom QuerySets or managers. A workflow that coordinates several models, authorization context, transactions, or external systems belongs in an explicit application service or use-case function. Views and serializers should translate HTTP input and output, then call that behavior rather than becoming the only place the rule exists.